<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="7413">
<package pkgid="0cc2a6e5853333fbd04a8550ef9ae8c6ecb836309b90b4026a2191ad670bb877" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="155633dc41e1170da1205fdeb74507b18c323c079d64eb2244b27d9e0811a9f1" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="87c48c0cedf57751457d2a0f1d95e1344468db2a2af4d7473bb22b2707307a50" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="da683275759267372cf1523164799c185280cc85aa87a1302ad009eec8075d12" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="fc0ef8ff955b6eb4ba09676e96548d422d6082efc9660538d29e7ae9c2e0c0d5" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="c73751daf45c35dd2f5f2627568e9c98413432cdd1a1d6d6d5b2312030224ebf" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="2af5a9cd5e2365fa26a0e813d413de7d17e33f4a9b6d612542e7c264df81152a" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="eae951a3ffbfa4d6478d28b429439f79bf8a3bb41ba22349490fa97b864b2c03" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="9c2d6181de6fb890cbcde8fbb571d3eafcbd79c700b0532077f19cd231526d9e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="6706bb1569ebe367aab3b1f4860c46eca33c84dfc50d61f8bf3b51e429152ad8" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="45598653b9cdfbe35736eb8206069f7e5ac0810539b1f268a0ca537b164eb37a" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="4d20ffbf33c7870eff64fc398493ddefcb800e8e97313252cefbcd3229278c44" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="ea651745254202d7b4645aed1bdb9aa5a63a052bd5fb5ecc3e89b15e61f1aba7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e861788635d2cfac9dbe6ab20cad8b482a9a0bd3f59480302df59738271b57e3" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="2f409a818f0f113ca5756d5c3c172a1ccedde910b0f7e2c9b2262b2a5d8c78da" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="9bee2aee8fbc9b0fe5798bb33ad1057bccdd1fa54d972d07a0b29bd7907d9fa7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="6a0cedaee830bb7b503e8f9c68b7f4a8f90f7f9fe4549850184b2a12a27d4b39" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="3817d4511123198ed0b7a57d805d53413a98d679d1a30fca544db0175a5482c9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="8970d31f2eeffd966821e2295c87f90165fe66a5d3a21791b84ef6319fba98f4" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="594762c37a235300d32aaaf22f9268f5de22c592da17df8044920583b2f45dd5" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="c347dd352b9753e21aeff56eacc91bbc3c15027e3f515008ac0042d6d36a7acb" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="3044f497dcc293d22c72b25f026e4c7dc82cd76c18291383436f58d34a928806" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="fd83d2e362e1d02931251c6ee0735c5bf2539900a7d190eb462f42463509b05b" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="1d5023d400ae8145f0d8d431aa7c26718b8d0e677ecdff22b8aa7f0c254826ba" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="12b52df107de3bfc23857a14f32323bfc0c97acc00c4a74e1a441719604b10e2" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0690ba86efcfe2e5df79e74c0a6f6a98a17ca60a6cfb123d9a2cf25d0e946827" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a09e51cec388ce4dcd9d345ff57474043461b4469370d427c64609c80e9aca52" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="2bb44b369ed0d9483237f280a560a1cfb87db0dd281c5e15881d1ce3f627cae0" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="e6c2844e5e4e7e1b80bb946536dcf61e6b8274ccebe36dc06637e25fbdeffce8" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="fffcf04d445803496558e7351002804a95f47ca05f6116ab814ad38ed9d3c56c" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="f65ab747fa7a5e1e2de3b645316172afbcde06b01ec7ef5293f554473af67ad5" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="225670e5ed028011f08debed852183f1b01dd891c41304f847485f67294ce894" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="78855252c5c79ea057c3bf1e900c1cad9f5b6e96b11731aa1708387914ce8d6b" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="381623c41c63c2680716199f4ce745bc95c8f2d5077c960fa458303361f89583" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ab1b11f2d417071df1cb009a1a64b84d2f24431e70d200c845f0e5b4fd4c3f48" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="8d0efe4cf2f4f3cab633eecb0dff04385912c9d7d590edf91cefa533ef8bc4af" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="f62421514866a8268a06d54bf1ba1d74762001bf1146a579ba3a2447f57b5e9c" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="ad484b13125091f588912d9062988b355330712a07d80a4fa7d926585dd0461d" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="b14c18b8dac509523c8ad3acd3762242d93d0288e54c756fd837d6a63bf25e9a" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="dcdd94c7e5c85f66fe50f34e976cc61e70ed85355da7022a3b075add806126e7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="86332df79154aacb7a7edd1f7cbd4083b9c4b99d29ee3fe66943d856d2bb5b18" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="412d6d3a2214dfe5599dde913b1c43fd608149f5aa9d52ef564a8aa41f4f9aee" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="abd52e72d835370d9193782df83c8ad5c78cf04bec28b7c37a36bf41a755b02f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="3dd617a023c2b320f0c8ded658aebcca76f6e097e7b645bfcca06d96d8e2ad60" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="41a3fce1e1983b9c07b12b6ebbd6bb3c293933280146e1973301cfcf59dbe06f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="45df44d49eeec3b2724553f0b7bd3ca09902d9bd4e51dafe01672a405226af48" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a50ab1cccb98a48682d50a127b35bebb51ee7427bef4abaf4536f5f6f8b54bb0" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="e8edf9779b4061147964cae6d9a546cde205d13d178a359265ac55006a0555fc" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="17a84fb5684c424e84be38ad360578c6c718ba8c518425abc5f3d181d56fe45b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="2b537f59ba49449cb42011260919a5a7eaa0bf11996399b5208863f9be216aa4" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="92c137b87015c533b23ca400c4f1d655511db73e155f50292e18f6819fed393b" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="3f3501c0734b5d41ead36a567ad11c45df17fffb87e3c95eaeb3da2cfc1f053c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="db489147014d3c4905436abc27bee966dcc00e0c93f6286d4742b6847be1930c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="9e72e7f1626bda30d6df06279e8b4d622b0d5f6e6eb7f8f9e45f6daeab977246" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="3acf3d21607b13a137e48102549693dc2aa1884ad9ad838c20385995f612ab81" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="63ac707cc0189b0013fac5cd53cc9ccea336c148a2a07c22b68a242a22176c33" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="f3ffff50386eefda00f36e47ddb692873660389eb7abfb7826b967c726430e5b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="b1da410e2bef35b5ff9cb650caf8bde025c7e1fb4931b8aac5986cecb9edbd3b" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c81de5033382a1baef8d556bbf0d7e94a54b3a94e557085d063b2b2f72be5206" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="557c1569bc31ee198b026df80f3046c9b63f27114102c6f1a03af58194016f18" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="d3e2f9ec93186308400181fc98b240a86beaede9a71df71921809e2ef45a0508" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="ac85f701350462e76c02b965d9f2ac06a407db7362a1c45c6a495535875f1420" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="97d130e490bbf69437c0622b190019b4a3dedb4d621a87d2edfa188f2def04fb" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6d5f1c481c902075f1e6bf9183fe0cbaf275decb919a75951997f9d948aaf954" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="83a9e26afad8016d2d2cfd792bf445aa79c5f15758147cd7fbc02f328794e106" name="Mesa" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="0c8f168a43b01137805205585004166f5629df4f2b85258fedd551f526d32ee8" name="Mesa" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="29fdf605a002f169fb6ac933b4d74a35cac935673062fc7072ca09d81d3d62bb" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1b1931807c3ad386083f64d571d948b83d5de52f34c82f7c6983a516655a5c67" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1b2501928338492c84372ed33787be46c50dbbb0341274914481bc656ed95cf2" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="e121188045e6ffbba2aec4ef71011cf9c2ade2af62d1dcca7c99bd4b3fa1bbdf" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e8b554b06569290e17db88b1eb25e41804f3bf383e92c0b84a0303e82a7029cb" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="45daca9862a0025bfe1628489eec7b1c8a9545def3e3c4ed234115ea81c97caa" name="Mesa-KHR-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1390d9c81b58745e3c67c5a549f3b9439c005dd99886d563c81176af2eb02d07" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="60b7870fac90c6515f894382aaf9ab05023eee06e3d344368b0776b0940eccd9" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="def23a0a8acef2da1dfda8316d95f776fdb326c728506652638a758da643dd22" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1e7ec92927faaea5f39aa1e2323c9be91a3911186f946e8c2a5df6cd119c4073" name="Mesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="91813deb2483c0198fa6d9b549a41913ad8c5acec4a9213a493b85d023976157" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="31b9ac643b603d702b3972ef4d08f88cd9d3c8f9a43f2de5c9bb1a217b278b83" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1da31fb09e2b9794a9660cd2d3d8e54b0db8fee51dc6868de5ae85e326bc3bc9" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1f1abd62dcc88d721321f24d7a062913261da5954cef91356b59c316d7cd4f18" name="Mesa-dri" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="08507be97c1541228769c9e85b629233b16c1fa65f19e0ddb6a4c80ef0a65432" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="02ff498196d161d3efff8a7123301f66f35683078951d46860c28876b422e788" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="eaf5ba58a520f9812e51e7f27b8669e8163e5fb6d94dfaa562473bd5d751e74b" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1f7e1eda8105a37242b183ac596dcf03c98c9dbd33b2fb65ae78c9f0cb955b64" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="686fcb34b736ddd9edba21e0bee7358d7d56f07a5f382ad83754d218eac00fd8" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1bd03a1ae8f32f0582bfb39e6825683f2aef7c363c461dfb8af3fd46b3d77b27" name="Mesa-dri-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2a5624fa28df580a375ff7ea960514b6a4238c53347918f4514c8ec112a1765c" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="dcba7cfc07b5f8b5ebb7ffbff54df233e69ac4958c859f64c35148808ce8f3dd" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3ff1153e8a63cae14852cf96deaf4a648881a2a84a4e2cb090be5a5b7d9be453" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ac5e8607dcb88c6aaab73bfa436548cbe534b10305a02c523667a6ba3aa96e1e" name="Mesa-dri-nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b073eda193a846b9d200a736fafdd0ac3fd936824394247f1af717cb606a3aa" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="87c6df56ef8df58c8eb28ad101c96ebecc76f4b67116b3ec359f96785d0f0d26" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d4ed811e4894be0dcc0d2558e6a5c1c9e31e3bf45e6eec1418fa80e437c92b39" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="290cbd4e17398a8e2f5b7e0c4de34a8cb76a8a1a6de7dba1f3a7c46152004cc4" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="864f59e8efb1b42f4c31a1e5ff2115cca8bee4e5e4e5e54a796fd8ef78759852" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a9294aba533ad24d4c3372e202d5e18930bd7f8b1e9aed72d882af4ec54200e1" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3e94462c87c12e59d005ed5341f7ac39c1ec6eba2ebd9ec412b8b22b5307c2c1" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c9a6cd5bea2dfbb5ab0dba26747d6d2809065bcf87e7f366dd71b35b6110b966" name="Mesa-gallium" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b1adfacfb7cf0f471212fb2bc67addcae2207ed419bc4e8717d6c58ee63aaae" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="aeef0e6a6b64e1ec61a63f5d3448c384ba8446a46940427ce6c8cc43bb717cc0" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="a9d90d41a14fa37f72b00dd32df9287d331cfe89fe028976dac02262a68e0939" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="b596d3a84679c2b3b994345c6f042a44a8058b5111daf8d554677daa53c5b546" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d52610bf63abf965c263d3af29a0917ba266662a84846d4ca9465ec1c6c2163e" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="58acc85079053942df906699fdd01c3cba31266bc916a44f55dbbb81381bffde" name="Mesa-libEGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="3f97241429b11bd108f68d181b7ceaab2aac8dc3f845fa5abb3e4f704bcfd3d3" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="4ee5eef5edf0f4bf7eab000136a4558384f57f9f09c973c266828c462f5b9cc5" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="40be9aa82e104e32e0426df9009cfa54d23824a0a9feafbeb390a52ded916e4b" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6f0839d9ab5f7312b0324ee04b4bef70f750a21e99eb9c14c160fe2ac20afb99" name="Mesa-libEGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8934929d27e343b6c9ab8b24e9ed9072b5dc5e54843eeef06bb474e394b36bf4" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="332eda8d90fc8c8931733c3d0449b51228a95633cefe10c7bbb134ee03405444" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="89e84592b76d0d6257bf5fba26ac07221fe82a22f9ab6c39488cc486af6cd7d9" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="f5ef5753e3f9409d5179ac3d60a8daa7e1a01aae6b2a75f660d5ae0cab5f19ef" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="98b86154bdd4c69390bba8e3f5319ff2acd80f23754debeb91d8b43518c50c1e" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="9a3c21d3c35daafdfe861ca1303fcfb7ae5398edc73e5ff5b1faa9de769890a9" name="Mesa-libGL-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8c807f5889170131e432b059f93b7993beddc3d45f41fbfeacd9e326d4a168ad" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="283bcf12c95e275a5e6a3125420941dae803cf64146458f6fcf6acd2b72bec6a" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4934e36cfb55f075ff93c1cc3b9c89da0e73fae9351725947891b26325253ae7" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1da6a3069329a701773f92cf2ab2fe06b3f200eb8bd71e4a790726899bd5b499" name="Mesa-libGL1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6ce897e3d0ca8b6ce1daa9977ec985b6c3c28b63af2432c9296b03a33194aaba" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6fdc66d1893eb73438092b5cd6959f5ea75362e45d7a0addbc7f8223eae4ce92" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="0eb0d2303ef2db8fce39c85848d8eb22c042377802739b0c649a4292b8106aaf" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="5523b759a1f9d667e1e43e338e47d78464b978949adc059a4064a6f20541cf6d" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c20a7631df14ff744fd6286b6d7d4364b2f26bad8fad24d31ed53e67dc5e60c1" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7bb1c4aa4d7b6ca58b475a7445fe08c033e7706cc037e3f1662ea242c3e69fcf" name="Mesa-libGLESv1_CM-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="900b7dd3e6ce7845d45cb812e2b7f0bcaf9a70bb5bc961e0ea6446fd69116a14" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="4449dfd15ba7a3b6853a263acb2f888406128614cc26e53fe3029cf9e69248ee" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ded25085eddc4e01f481fd0a096687466127cfc4da279d64028b4bc24e77e886" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b9e42e717ad2ceed1aeda6cda5104ed5b89bcc99286d950628c88d5bc1857c08" name="Mesa-libGLESv1_CM1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="bab4626029d24ff7af3583a6e11aec6ad8eaf23639937a41b890177585301fe5" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="bd9f37191dd06754e4e876c0ce9e0387cbcc0250d373ab066a1ab7624d84b9ab" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1355c8975fbfe9dcd2e44a6d6ed641eeccb8c0b0b010e94262de87fe47337f2d" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4f024f48c587499a73d9917553e2c33cbb688906183d33193ee269f0e08598b4" name="Mesa-libGLESv2-2" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="b09edc30934ffeaa36f0cbec7308de8f4f612ec4a36788f4ce9320ef9182ded8" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8948a03afae4749ee78e8651d33d1bb7af4a6488cab29131efb3eec8ad6d32cb" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="51adadca2aa7cf55fb59c54c552f564681c3084c1aa1141de5a62a1a9f680758" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e15aa45aa359c1d306aa3e2da80a4c9de1ec1894e8e9ccf977be9c791d8e6b63" name="Mesa-libGLESv2-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="9cbbdecdb34bf3902f4cc1df3077b41747d95d52f6d92ac7991d52e09af22def" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="94699904898a2d90e3309b36f5516ca9ec76e52b77cacb0b89dfaf7e9953210b" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="86d2b4bdfae6460d5c07fbb4dc00b3c955f92aaf4bfa188bdc16e3d36164cca1" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7db2bbdb293846515565ef5be5c5b90f035f6437029068f98bf084e7ba679cd3" name="Mesa-libGLESv3-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="14db2549ddbab3eec239fccec364d3d828f373c54fd347f5c0e1686c14fa0e37" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="987f9a37d720de5038f351ffa65a53276ee6c734306f7aa0c697b46edeeeca7c" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3090d085b6d3aef2dff1c48a6b335297b25b8eb4ea3f01e73d624dccd9aad059" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="7e94d236be61f3c9877ff5f8f1aed793fec2874842c7fcc7c7e6b07754f60775" name="Mesa-libOpenCL" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="80e87ada9ed9b12ecaa6f2f1d9bcec593bd1df7b425847979b82c3c83de23cd0" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="8dd0d39d06f65e7b3a08163229ae150f151e5bac44fec2f04594a4df5a0c8741" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c8fd79b9cc96d31eb2b0af877de910ad1cd5e7995a765ddb080f44336e60388e" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b05001c355f0722023aee79f4732cb7314abaee66c29a8540c59ca07849999fd" name="Mesa-libVulkan-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="93259bd18962cd5490134543a580d5a50326d82c2a27c794fd2ea3068429080b" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="eaed5fba54e73953196c0729c92e54a39782b4f9b3ce3ae561dfa19c71e08196" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="430076b40cec16c42848c398f865ef379611a3640306cc937ef01af60648ba5c" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="8108920df1570f0b9b24c638a728fd90b9632ac625e60ccfb956a9d5aeba1fec" name="Mesa-libd3d" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2dd589e7c5084fa0213db08941945a7fbaf32aa37bbf6afba34aa3c6545c7af5" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ff54bc9fcb3911636afc597b3519c26abe54792686ea6d82106c6de0b4fdd91d" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="108e0437377088139ad2dd144ef95614c7003930d26dc83c4d5e78f43c3c9b90" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a3993d9d5e2984784094d5c762000ad2b24084cb0b23621c85a463c79bdb2113" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3952b31b02fa58f16197ceea0f13d97e97a81361cb825e52716e4a34ec5f28ec" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="72e1c5c2a421f15958197db64cd074fe3c082877a3e430bc844c39044c99eb90" name="Mesa-libd3d-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a414002265a61306c0fd2213eb913a3c20493b034ad70bd0db3339839401f3b9" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="bd7e5947dee74395a4458208349e13346ebcbfaab73123dfada4704dfa59c1b3" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="59f31677c3d38dac213f66a1a83a13206bad8a45a6e0ddbafd947ae249edee84" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6439ce7e41260475e90c1b15d513fd61a03be03f6a1080c47562209329a71e6d" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="829aa2da369e5b785ea83a0c376e83a871a1b6d3f29d23247428712274edfd3d" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="c1a3c6e522cd8284c59afdc7def25e70834947af8df5329c622ffd26e3eb7791" name="Mesa-libglapi-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="cb0bc914e11645820b3230aa3f88b24bf68f147f973289c6086a6bf3fd88ca4c" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="42b8b7b8bfe2fdcb5b700eb1c261dbabb81f8b4cfde8b8b4f8eb456299ef6857" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="2a6a46336849578d5d8637221e82ec356ea1271cc7d7044741a73f2e0f72a9fc" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="578c640e25a82f74841a892ea9da28cf690aa8e7b595228e8a5765dc80a8b430" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="59f53097aee15827a03e08da4cb409645929e317c40f43c08b7ace688960633b" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="fa9f006d796f41de07ebacb4ed125036e51c039801392ea27e7a944d02714898" name="Mesa-libglapi0" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a93b1bf8f739f2ff3384857cbbd193d6f3e262a6173f8f3fed31956f752c11f7" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1b975c3cd5e5081ea7356fa63de347ef98ac16ac323b68d79ffb3172e62d78ea" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="91c3174b4eee7c5aa0656e7b176736b74c56e035300f3fccf655f341f09c99b4" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2b6444e4030acda5164d393554d613585a52c739795fdf5212cb060668ba9101" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d0acd05314ddb92ef11eb4f357b39e809bd4c2f6050f6a7a96f383b94d7ca3a3" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="cda85e49641b923c782b6d6ad2b8851f96d532054d56764a995c5a90c9a50b47" name="Mesa-libva" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="6039a3cef500c445f1b570a088ba36e4cba9732e3d2548d6b61ce217c9b426ce" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ffaac544e48d3abcb0e3af4d4ecf10e12cc9d94652f3a446925bb473c5fec76c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="5dabefc54e8b8f646338b96e86d6d09a6841341de99e4c88e43bfd4c15572d72" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="63c8d20bc1230bfe427a0b1f46409c603bdc13f6356c3cec36713eb1512f9b62" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="09dc812219793c81cf3742992e537606304e9070f86d247acd5bb46471037bd6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="b53b3029f39f0dd336d2c494aa51723acf3ccdd4f937eb0c9a43879b031df64b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c95492c6c19a14f9c3322fda7e66e518533cfbf5f68973ab921ebe01717e5b89" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="f51f3cd53dfcbc9d9f21328e2fc254d3d25b87f57eed6b799de2efbf6571599b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="38bc826cdf1cee25495169bf2bac8f8119698a7e2f6cf678650ed7d1658a0747" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="e7efe6b3b86a3b8379ccbe00ace90a6aa8bc473bc2e8921bc4b976ccba217013" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="7fbd307bf3844cc53fd03f95c4477fc2003ee42531f23a2eafdfff07d94c246d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="6a0a6c6a06ab196f3feb3340832b0d74afa13062afa10e8a096a73a71104ed36" name="MozillaFirefox-branding-openSUSE" arch="src">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
  <changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
  <changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
  <changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
  <changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
  <changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="307f77b4089a1ae5c38b6be350c8ee7f44e3562364924503989e9ff7b3cf3609" name="MozillaFirefox-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="4f0f13b35988cbb7c2c932dcf572732ec84d5172daf5c80b8c07b51c7acdd753" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="448cf6ceee4d164e1d2df5654ec630ee4174ec1e1da5d8af72ed012a9c5b0e2b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="9b557aaa3d3a1b698e29b9fe38ce2332402064786d66c32fabab5a4fb5f9246a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="f3570079933439dedff8c82661d8fa2814b6feb22dc5c251a98f9eed027b87f0" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="249c877ce06184cc11a87eb2ddcbbae52572106635539c148798e8cc03908726" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="c7a872d36a4917528daa9c46d08dc32043166d267d2437cfbedaab58ce73b585" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="b422b95fcf96224a4efac629d2aa1fe29ac997a9f1ca8072f99691610093e77d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="7785eb6dc80e7581dcf2642831afa782cd1c951c1879b83d2f27e4cb9fd86a51" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c3db69d5fc91f34d5f79293d726bab20600510a85fdd19414aa225a7d92865b5" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="674ceb62c7b17513c8d5592a673e85df6705b9975f6fde2dabd48c5629ad5d95" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="490b513dca079970ea2f0628bd2a7ab0999bb9f91100dcb97926c375f078db59" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="df829fd191df7dc70428ddd7764bbe2085b6a0bb858f9e70180a198dd938bfc1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f9de92c2fe72f1ea2cab75f3e1971b1ef634bfe4c6ef9ea0996faf08b2249cb7" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="7a4073f0d8ae7f3e0777ec7977184a14be3ee7c34cb0b25dea46786136e02d04" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="9308e0fc133144fd49abde6306529d142817a956c3920c6133266fe6fd3ad018" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="1024a691677eec2abe9a1ce0354bebd7de726c1ba066f6cabf32b575a250f00c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="be9cd5c0609c86d7ba3d8593139fc47942153b3216b1468e9a2b1a68269b7ca8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="a797eae4cde6ca192f78482ddf77ca7cb7fa818858d128aea6b9e0d10bc0a9ca" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="7a20458a36ac62cb707cf4ae1240dcd214124c0ad1745f11b3e3f0c1401d2b8d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="6deb7f25e71fa6f31c00c6290b9a1cd03a1381fefca3ca751f8da80123ddea81" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="28c0db5b59d2936400d1607d5fc70cbc3940979ca61b9b2b80d0d439d21e4925" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="bd31fe54b71a3a2a8eee05a2945f32bff73ed44aa4d9ce9f39a885608fd64f8f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="65f91def7c9313f7cdac9befee9681b61ae9e1283438b00857e9276c1b6bccc7" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="43dc8fa27834cecb2acf7d11dd614e4de23092b05a94e6196f27c917901981fe" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp151.2.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="ca627ba1bd3d6a08e0ff79840495714f53298a315166d873c46351fe092d543e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.2.0" rel="lp151.2.18.2"/>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569326400">- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Disable DoH by default
  * Not yet officially active in ESR, but just to make sure</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570536000">- Moved some settings from branding-package here (bsc#1153869)
- add patch to fix LTO build (w/o PGO):
  * mozilla-fix-top-level-asm.patch
- remove obsolete kde.js setting (boo#1151186) and related patch:
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
  * modified firefox-kde.patch for the removal of kde.js</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570708800">- Add Provides-line for translations-common (bsc#1153423)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1570795200">- Add patch to lower python requirement to 3.4 in order to
  build on SLE-12:
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571659200">- Firefox Extended Support Release 68.2.0 ESR
  * Enterprise: New administrative policies were added. More
    information and templates are available at the Policy
    Templates page.
  * Fixed: Various security fixes
  MFSA 2019-33 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- removed now upstream patches:
  * mozilla-bmo1573381.patch
  * mozilla-bmo1512162.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
</package>
<package pkgid="c6f3438bc42bdeec687f615437a4e4a477887f14a12ddfb782829bbff32fa5ce" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="1fbbd8c77bc1108e42b3b8a43e418a270df9f8cb220cd37e7e34fa8efc25f98b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="cc98766974b91cb23eb75520cd3d671c918dfbeb21c6d87e61946c5ec99bf326" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="411e782f66af0533b03a391b016c9131f12a58b0be485641392af35bf391c9ae" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f73cc782015c3f46544b39ed79fd301ba712eff1facfc1b926dee452d4400b8e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="84ce73fee3ecac9a555747571acce9e94dde82af5a7076ef0743363c2e7700be" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="780645c8af77fee6055148749fe520362acde8b00068d9db14d057e8d7316718" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="790da49a0f0dde97ef8a4ac518b781a6f84bf4266924b1c8821efa83f7de1596" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="2f18e45c693052012fa199b7e159b885cc6d55b3dfc968a4ce5799050b069655" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="ddce4cf6e130826b34a042f45c450859143b3b7f5fe324bda87e7fe7aeafc8de" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="ff03d2222f05fba3bf124169f74a34fd1c74c50acce2422c4d21bb491d1b5b41" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="64b87078d36aaaa0a984f6420f7cbae011f993ed5ddea33b52d5799735a5f982" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="e569ef43a3eb78f0c2e83338e6a830e2b60eaca60b42589e89e1929ce01181aa" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="e14284c5080124820c2028092e6662a83dfa659dee9004dd2fa8936ddfe4a5a0" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="8b85a79e17fb7454384d1cfd5061249a39b779bd2321a2891465516be53aa841" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="465c212728df4068ef3283dcbbfa7ec63e136cec281816fba46f448d47f4b19e" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="30a5a4c4470534099c8f061ee686eb17e17591e57320309b2272a1850b5e0549" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="275a69357ab4c15af8e0b01ae55a492e531706304c840e97fe401764277f2363" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="e347ad6663303eab251ac10fff59ed0d49d27f8c9bca980d8d3320f75186ab52" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="06c2b7c4a4dae7c63a87a2e3d40b9cf3426906fbe531cf7b44d65f49266f9409" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="5415e5ce7d20b0f1bc4bdab33c3c00ded514a635fead2df1857466e185f6ea38" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="980f48498d7888ca41d3d8fb4b7c12c3b58724a2e2f57fecb3ad71e086114e45" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="5ca1ec04bc8f2142f88e400e038b59e9f39edf6d0f54eda9a6086f17f774653f" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp151.2.13.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="937d92247fb421c7fd3665b061d89c3e8e521796c0fe450d98c7abde7c9ee48d" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.2.1" rel="lp151.2.16.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
</package>
<package pkgid="e6f07e54afc825c65e4507b5105d6e3d8d3f454376da719c44c0b19ab57e174a" name="NetworkManager-openvpn" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="8607808dd401e2f7c84bedbe52b9c8367c239120827f7002bc8a310f56282d33" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="00245319793593edb53b060ab972e4bd3b7140d7d773541fd3d2627d3a758646" name="NetworkManager-openvpn-gnome" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="2559646f0492b36be01d86d437f6c44e430daeebabb5eb0b50feac57ba9521dd" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="d47ba39cdabf2fe22b6f26cfbd8fa597221a34152b0c7f7da3064ecf5f7b395a" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="c2dccecc11dabe5a03d84b7282c6b667e674afe3fecbc717e5b4ff1b63b97ce9" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="ffdea299f2e70f29dd3ea7494bef89d1bd259507269d64634c5d8fc8d1cecf3b" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="12f782e3b41f712b995038c8960e1eb368458c09025f666a00178407fa88ed0b" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="39f5c96109900a674a66564d03930cd07f88db196465ed61088bd9288aaad027" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="5a674e7a5904eba96ff4e1aefc0841d0f93a56d6143c12fe2a7ed9ef4f625b1e" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="d3d9619671da55cbd281589ece5edcfbc479e8a8d2b42b8a34d505869c4e3136" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="384b956c4efc4c00f1656734b0707708abf4119d0e3ef16c1b914028dbc01d00" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="03add7b3deb0cd2d8846b84eb8d9be0fdc3c2a87baee04fa3873d9f1c4d228ac" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="6cd9aec7a2c16ad055677ded826c8cdf47bab9cb62db198ab2c3ec56e6e15f96" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="0706da34751c6a18a1f4a0c1a7178276d95c539c8ccfe7f9f99cc5ee57109349" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="f4d8649e597a171ce57db66684598ebea729c337345940dd1cbea7911ed8e510" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="cba251ef83f1a8bd150047b9c98ee0600e870c4820a6ae9e990d7130e7ded64f" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="6a3777d55e435d44e71a887ed7c2cba650932452e2ad5261949a6ead4d8f4b6a" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="5939a4a6b82c275d0a2feb7e81b4f98269408d605b0fb8900c5bb1aa148ffd1a" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="600cba2184e441581cd41225910a3e16210e9309056ecd018310f31bb5460510" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="9bafd9beba9b594e2d391b18390f0ad7a6e153007fdaa356b61eb8ee2dc4d64b" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="620c362dbc3c3416281b329b09ff00e0862653fa29354949e21a421e31420587" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="03b425a375d8f05e6a8470f2e3aaf67e5589851c4c22b7d7bcae37706acfea0c" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="6bbe7c103e120304621f3b05cf45b6f2e9e27adf95984f346d9156f0658408e8" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="1fe4167ad94c5141942fe80688caa2b6f52bc1c74e3cd9ae43f0144642db7f64" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="716476c3713918d4ca41b08bae8e80ef123b87d8e3c736552dafa4296c4077e4" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="fff72b02861e41d37232965f2829460e6242db60bb802e846e19805236122d01" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="3e594e013d052e6aecf274cdd811c0cf730da09ba8fffe0ff4b58fc7c7cb0de5" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="df559d0f012333d73cf0f6a649862ad437d8874bb529ac77aed673cf322491d1" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="dad38fd3a3ada78f1dd32a38509b89f09fbd25bceb74c4e3d4a262c1ba8214f2" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="472e700f5aeccaab3b0064c7243a9a00c69214c948db2f305a37c2f705db5015" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="836e99524a82a19209cc86709d34f5fa3a49ffba33fa71bb1941c99f1a24f393" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="99f437c7ed194507c0fa026a118f1bb42b3281d57cd6f08a8cc5b67e47b96cfa" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="17275eab0f6fff3d0d459f08dff4c07359cf8326f54b8922a97cd4be050ae1e2" name="SDL_image" arch="src">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="sndirsch@suse.de" date="1197806400">- fixed BuildRequires for SUSE &lt; 10.2</changelog>
  <changelog author="prusnak@suse.cz" date="1201262400">- fix buffer overflow in GIF code (gif-overflow.patch) [#355864]</changelog>
  <changelog author="prusnak@suse.cz" date="1201608000">- fix buffer overflow in LBM code (lbm-overflow.patch) [#355864]</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files, useless without
  SDL static libraries too.
- fix -devel package dependencies.</changelog>
  <changelog author="prusnak@suse.cz" date="1242734400">- updated to 2.1.7
  * Fixed buffer overflow in BMP loading code
  * Fixed buffer overflow in GIF loading code
- removed obsoleted patches:
  * gif-overflow.patch (mainline)
  * lbm-overflow.patch (mainline)</changelog>
  <changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
  <changelog author="prusnak@suse.cz" date="1243598400">- removed VisualC.zip, Watcom-OS2.zip, Xcode.tar.gz from upstream
  tarball [bnc#508084]</changelog>
  <changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="ac5961c6e2199683fed39cf5283e2a4395239729f13750813942fb55a5e5b848" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.19" rel="lp151.2.3.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="9d872c4d5684ff2a69519c49612a8d2e7a60113dabc3160cba6cd7f0e69728f9" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.3.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="f6eaeb97996b73981d8d345281e07c05677b6a422246c4ad90ec582b99b2095a" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.20" rel="lp151.2.6.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="23de2eae19c54caa9b826304b30aa06a36b2c38bd001415fe1ab8062c54cb517" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.20" rel="lp151.2.6.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="efa19a5ec87a7beef3f86e107db2f93fd5dd4f22652ba4770c6f7df56f6b82e4" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.22" rel="lp151.2.9.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="5bb37ffc9e49e98415ce8256e2eec2b155105cd31eebea9ee2fe351b72e34955" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.22" rel="lp151.2.9.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="cbdb493e32e6627d81fcee903b68e5113f6b2020d2087a828a43e8f1b9db640e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="2bd52e8266084be721b1a71fc9ebc83f31edef80c4b3a4e3b81ec0504f555472" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="1cfe8ba25c11c99ab3fc71fe8b25422c4d164a6a1fb8c7f7b1a4d921659ff1d4" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="cea51600b38f6708dd72f75ecbd831ed8caca56334677c7df8e13e7d6dbe0a9e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="657e7a3151a669cd692ab6c56ad7fdee794adab8158d1996c89fe6fcfd37ee6c" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="41513e22aa900d7cb80f0976fafa4c1fae33bcdcc8f62a898858bca2b9d56a96" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="7809f998eab2c9602332cbb29bca599b4d7119267efda3794bee3890a3ca7633" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="becb6ead884c807af986fbd24bed5b364f1888421fb81e4f5fece0a13b9b0fc4" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="2ab6fc0d0628e6ee14fb01f47d9c83acb3abd1b3a79b895e2e0c9717fe0929a9" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="e4cb2966bf9c14e3e03a307de0a4b11c64b75b0626670ee42f1fe4581523507d" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="2b9e91792c2fcd53e110843a43fc6f27671dccde50c837a35f7c8efe7aeceecc" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="d599d2e41ac8307751182002f509a6848aeca0f67c5e6df1cb3e916e57931ed4" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="b01cb4070b76c621d32075e1ace42504ff05d199fe6816c0ee6c004e73349dde" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="663f2f48a30c01873160670b6e87928953da65f97ab30ac85d393b59e63726a6" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="45b01c69b60eebe09d0a17e563d4386d2c6f644d43c5f292c2c1a1ff5a8fd5df" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="6612db6e0c6521c17545430a4c1a86f62bf0a87105b3c909c62a2a58e7d98596" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="71c48610c6e382d7a78fc78e1b339626568aefe19f6a1fde0ec7265cf244edc6" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="be132732781e6c986c96b72f56acfb02827107b8050e069eb5858e18494d2f85" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="8b399b5adab9774dca3ab3c62f6646d765c5a9e59c9e3461eb227e4d60134c2b" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="30d5ece8dd45cde4f66cbbd74db3aa59ca47f97d2aea051eca8a56d99aa406ca" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="1c5a8f559570aa35e0834e4d12e08b8be92076f28cfa76925a0d54bd3aa6f88d" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="039dcf3d5246f1eae3df1c78326f005c5ffc9847bdae9682c5be136b6404f801" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="e6d00acea74eb7e352bb2178b72fdfcdb682911f4522ec3decfed83a9540c266" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="792b864d53387957f55347e6e2382b681e0b295a150a55da483bc3eddef3d985" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="0dc9a9c4f6814338b2a71450a5285e3ecfb40fe29295cc268203c7f9e5eb3805" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="0b69675af40156af794e9e5d5aa220a3146bd5b5c25174704fe045860c682ffa" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="03da18297c7c3f306aa8fead338c1fabec0af80de0aa84e614adbe836bfaa031" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="657040a1daae2d04141adf1f9d3e0fa8d27508cab66e563eb75d4d899856f65a" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="57a929a798b0055d81fef959b9f2f97fdd95f7ea1f0a86bc3d6bc90ac9044ead" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="57ddf7457aab1184401962090a33b88655788255df96b2d7ea0c643a1620eb2a" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.12.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
</package>
<package pkgid="29f834d099ee5d04f0381defb3332db43016d6c328d28f28714bbad1a9b6e843" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="02eeada02182d1b8fad842d523a11c23925c6d4de9c12c4a53eff8807c5a05a3" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="dfb450592c70b8541d02d4ef5ec83e131bf42cc3b992fd75270602e766cc2394" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="cb83b691aa9fbe8d2481a8aa6e36e72c7db1f11838b8fef4c35e83658717a513" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.6.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="938489551f6742ad2a490f8c877c7f3a723c66b499c1bf609ebd4fe7ea503279" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="10c500eb5cdefa3dc8513284e0088fa13afb5bce699624139d9ee3108c698d51" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.9.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="9702b20a099661dacb7f49edd0b89b3c367ac47be43e51c5e703710d0b4b720c" name="accountsservice" arch="i586">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="5b14be5c0feee6a68c18d6435299540e1cf2c506ac593477c42c91c87869a515" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="a40c13ca62de2959b60f06e934ade0737929bb79b5b481d4bc0d81fb4057ebd0" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="2ac5286db9c6ad4d57844cf4bebd77c3c7c05ac1aadcb6c5052e5cf9687cfa39" name="accountsservice-devel" arch="i586">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="cee7c52384a0a93e6ab688c2ac2dad6b8f09e04f8b4a502274ee21195d7cebf3" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="ee85c42376634c3fa343c19f4d485cc7b9e067cf87dc735cd9722a327e08ed8f" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="db63a1e9202aa1d3ec5afbbe2b1b3929a8ef2af3627037f373155986717a3b2b" name="aide" arch="src">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.de" date="1144929600">- run aide --init as test</changelog>
  <changelog author="meissner@suse.de" date="1175169600">- buildrequires flex,bison</changelog>
  <changelog author="meissner@suse.de" date="1202817600">- Version 0.13.1
  * Fixed bug with reading gzipped aide.db files
  * Removed dead ustat code
- Version 0.13
  * Added support for selinux and xattr attributes
    (kindly contributed by Red Hat)
  * Added support for the Linux Audit System
    (kindly contributed by Red Hat)
  * Fixed usage of libgcrypt instead of libmhash
  * Added file locking for output files
  * Fixed bugs
- Version 0.12
  * Fixed bugs
  * Allow http/https/ftp URLs through libcurl
  * Support posix_fadvice() to avoid caching files
- enabled ACL and XATTR support</changelog>
  <changelog author="meissner@suse.de" date="1219406400">- enabled SELinux support [Fate#303662]
- enabled curl
- disable static (does not make much sense)</changelog>
  <changelog author="meissner@suse.de" date="1231156800">- fixed abort on check/update by removing the hash requirement bnc#406597
- fixed version output bnc#463511
- enhanced testcase to also run one aide --check</changelog>
  <changelog author="crrodriguez@suse.de" date="1245240000">- fix build when as-needed is a default liker option</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="ro@suse.de" date="1272542400">- make aide check verbose to get started
- add sleep and sync to fix build</changelog>
  <changelog author="meissner@suse.de" date="1281441600">- updated to 0.15
  - lots of fixes and some new stuff</changelog>
  <changelog author="freespacer@gmx.de" date="1285934400">- updated to version 0.15.1
  - Ignore changed file name if attributes does not match
  - Allow absence of DB_CHECKINODE if file name has changed
- renew patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="f81cd986ad21720019a4b322de09abbb74e4cf8bb7074c602c3b822e79e87fd7" name="aide" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="90d1cda319aacbccae539d9448fda89e936b986d31177e118eb46eabf8d83ed7" name="aide-test" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp151.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="5d504abcc116f6eaf6b0d08a01800d69631b5a0de586713a600312c789cf7016" name="akonadi-server" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="cf7ed36281046c2350d33c9a30eb8316a1e96cfdd1e3636eb38f1ef4daec2650" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="43b774e220d33433afd8e44573828607fe6063dbb66565b50f3b4936968cff5e" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="5d4a382a80697d610fcbd60928759dc3c4783141bd35f4e90c1b3631781239ec" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="ab701362f74f03dba50db290000181c93e491b85654cd6bdb2d7008e0bb84bf0" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="464def0e93649f9bb5e1000c1b6870d2d3339a66c1edd855e4fbdc884cadd4a0" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="d9e4a18645571d4ab2e4b41768351a0fade3d0ca1cfab1d801e450b3817f297b" name="alsa-firmware" arch="src">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1202472000">- updated to version 1.0.16-final:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1214481600">- updated to version 1.0.17-rc2:
  * update asihpi firmwares</changelog>
  <changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1232625600">- updated to version 1.0.19:
  * updated PCXHR firmwares</changelog>
  <changelog author="ro@suse.de" date="1236254400">- fix build</changelog>
  <changelog author="tiwai@suse.de" date="1241524800">- exclude some firmware files already contained in kernel-firmware
  package</changelog>
  <changelog author="tiwai@suse.de" date="1241611200">- updated to version 1.0.20:
  * just a version number bump</changelog>
  <changelog author="tiwai@suse.de" date="1254744000">- really exclude firmware files in kernel-firmware package</changelog>
  <changelog author="aj@suse.de" date="1267012800">- Use ATTR instead of SYSFS for udev rules.</changelog>
  <changelog author="tiwai@suse.de" date="1271678400">- updated to version 1.0.23:
  * update asihpi firmware version 40304</changelog>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="a9db7f8adcffe519b1ff5b0a0e7269d977201fc5a2e8719192cfb9da3372ff36" name="ansible" arch="noarch">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="be9e5c3f56ceae1c8b15711f8313c01d1bb41b3af02bef41aa9fa2bc9b19d78f" name="ansible" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="002fd7710092d7770209d6b17eff981d7098f2d47e774395ea6999866a92a39b" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="8d48d0815c9a235d7a0385cbe2246c5be635ae6a87195063ae5da76895a1f90f" name="apache-commons-beanutils" arch="src">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.6.1 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="skh@suse.de" date="1108987200">- update to version 1.7.0
- don't use icecream</changelog>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="bd79ca58ced5e78a13953db0534a69f856978d01892a87727e0a9bac0dcaf9f3" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="415cc4e2ce8fa85a15689bb8a61e0679711453829d77b352da1d12735f030ee7" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="33e48ffe7b4c1dcc1766336ebd538431ed94e1759d64ecff496a423129497585" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="c05072cad9b1832c74dab33fc02ad1f6090464b58eb4d0aeaf8deb6faeeef140" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="4e8f24b69a1d44bd6f5a85001e7ad261fee7bb663d0bd9df9c92b882bd44104f" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="7ece432a57c192e4ab20f9d60ae4c84f2ad44c659c3869899142db0d80b56d40" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="58378a20a00fffa87a789be7855f610dee3b6aa8e4e7236da2fdfe2d11b4263f" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="3bc39d26adce24cf1400b59e73d276516d0b041e1c3d3bb2deaf43984ca0cab9" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="3987c57f44d0760b665366a422ac3fcb09f4c6bad0f3d554f0b171bb92a9204a" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="56e710151ab3ba46672bc31a5191c76139ade63db8f127f2f44c8183529b5e67" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="74e0474cd806759d5e30b5e03e25e3ef386efb9baa230b0dac1e57443fb34429" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="46d98c5d274a372f780520216e9f7e8603e5ee00b3d1c9b503ce8d32a67f1e0d" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="64cf22b85a83a20051dc55cfd0248c653f5a61584564e5e47c50365a91abf985" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="7ccb91fea5787b697d475c5797e0e8013980fce2730f8fff9f8ef6f9b41d28b7" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="a9c8e8ca93809e97f333b7a468200ad7806ea644811419007c7876ad68da486a" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="1f8622c9b0724f0faedfc22dc7d52e0726042bcc28bd6d36f0c32935bf1c13b2" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="7047a69298c452de82911c4ee6e408d6e309c9c6fb965e3020b03ec15ef9015e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="338dd805beaa5a9763b047fdcfee9b2d61e6f65d411adf5c0ee260c122bb40e4" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="82eea90d27f4ea3d9abba8c6fd4e947841465b4bbfc8ce63b3b7e518423f95ff" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="b632f057c955c18b841ab04ac1053c3d433c67da8abb5965eba925dc3c26908c" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="d8a4bc44bcb7973c97f75780e379c9c84daa7bb4012e602bf421ad036ab2c12d" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="781c6c741b6b07f3eab764a7298197e5e76124a6d13da2c72d17e32356d3cb1c" name="apache2-mod_apparmor" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="9bf197821748b88a08b98a244fed080ddfb94f0f6cb8c995aacd7e7e3d998c24" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="644a117c3eeba2e30f7b5356d87469dda18950da31296854c6335659e9eaa8ed" name="apache2-mod_auth_kerb" arch="src">
  <version epoch="0" ver="5.4" rel="lp151.3.3.1"/>
  <changelog author="mc@suse.de" date="1147867200">- initial release</changelog>
  <changelog author="mc@suse.de" date="1158667200">- update to version 5.1</changelog>
  <changelog author="mc@suse.de" date="1166529600">- update to version 5.3</changelog>
  <changelog author="mc@suse.de" date="1189425600">- add mod_auth_kerb-init_creds_opt.dif</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238155200">- update to 5.4:
  * implemented KrbServiceName Any to deal with multiple keytab
    entries for various browsers
  * implemented KrbLocalUserMapping i.e. to strip @REALM from
    username for further use
  * implemented already_succeeded function to avoid hammering the
    KDC with same auth requests in single connection
  * fixed threading issues
  * improved configure and Makefile scripts (mainly for BSD users)
  * fixed minor issues
- minor spec file style fixes
- added patch to fix compiler warnings
- removed mod_auth_kerb-init_creds_opt.dif, has been merged
  upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238500800">- build against heimdal on SLE 9
- added missing %changelog in spec file</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238587200">- fixed warning fixing patch that was causing a "undefined symbol:
  cmp_gss_type" error at runtime</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832000">- add per-connection authentication caching, based on
  https://sourceforge.net/tracker/?func=detail&amp;aid=1891230&amp;group_id=51775&amp;atid=464526
  by &lt;jorgensen@lowtechsolutions.net&gt;, but made it configurable
  through the KrbCacheAuthentication directive (that is disabled
  by default, as it is to be seen as experimental)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832001">- add mod_auth_kerb.apache22.patch that adds Apache 2.2 authn
  provider support (authn_kerberos):
  https://sourceforge.net/tracker/?func=detail&amp;aid=2782088&amp;group_id=51775&amp;atid=464526</changelog>
  <changelog author="draht@suse.de" date="1342094400">- preparation of the package for submission against sle11-sp1,
  review of source and patches/changes, compilation warnings,
  licence and packaging. This is (FATE#313165) (ECO-FATE#313165)
  and [bnc#771265].</changelog>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="55adc6263808bd206e05c2f6c28c30e778f2ca9e6c46078200dc16efef05469c" name="apache2-mod_auth_kerb" arch="x86_64">
  <version epoch="0" ver="5.4" rel="lp151.3.3.1"/>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="e89f5a82e17d9966ed7694b5a3ddbe09e9d638bea4d5f23318fbfa32c23b2b18" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="lp151.2.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
</package>
<package pkgid="8a9a7aecde084a3e16abd4273494912b89f27463dd4bc38f550929ebf2345f29" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="lp151.2.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
</package>
<package pkgid="9fedc7286cbf73b5040f51a50d0414f2d91d37e04c055cf5cee465189c1ae4cd" name="apache2-mod_nss" arch="src">
  <version epoch="0" ver="1.0.17" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="016ede76548fb9be993f026e39d6fb8bd3dcbb135531ffc4e03da799245b1eec" name="apache2-mod_nss" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="ebe4da32929acf079dbdcb530467847a60f5332c6ab2485cf09d939bee8431ac" name="apache2-mod_perl" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1338465600">- update to 2.0.6
  +Set the -apxs argument correctly when building from mod_perl.
  [Steve Hay]
  +Doc spelling fix
  [Nicholas Bamber]
  +Add Apache-Test 1.34 dependency.
  [Phred]</changelog>
  <changelog author="coolo@suse.com" date="1349956800">- buildrequire netcfg explicitly</changelog>
  <changelog author="dimstar@opensuse.org" date="1365249600">- Update to version 2.0.7+svn1448242 (http24 branch):
  + Fix build with Apache 2.4.
- Update to version 2.0.7:
  + Fix breakage caused by removal of PL_uid et al from perl 5.16.0.
- Drop patch-PL_uid.diff: fixed upstream.
- Adjust extra.conf setup for the test suite: include the
  nescessary modules needed to have a valid configuration for the
  test server: access_compat_module, authn_core_module,
  authz_core_module and unixd_module.</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- update to version 2.0.8 (http24 branch as used by debian):
  Perl 5.16.3's fix for a rehash-based DoS makes it more difficult to invoke
  the workaround for the old hash collision attack, which breaks mod_perl's
  t/perl/hash_attack.t. Patch from rt.cpan.org #83916 improves the fix
  previously applied as revision 1455340. [Zefram]
  On Perl 5.17.6 and above, hash seeding has changed, and HvREHASH has
  disappeared. Patch to update mod_perl accordingly from rt.cpan.org #83921.
  [Zefram]
  Restore build with Perl 5.8.1, 5.8.2 etc: take care to use
  $Config{useithreads} rather than $Config{usethreads}, and supply definitions
  of Newx and Newxz as necessary. [Steve Hay]
  On Perl 5.17.9, t/apache/read2.t fails because an "uninitialized value"
  warning is generated for the buffer being autovivified. This is because
  the sv_setpvn() that's meant to vivify the buffer doesn't perform set
  magic; the warning is generated by the immediately following SvPV_force().
  Patch to fix this from rt.cpan.org #83922. [Zefram]
  Fix t/perl/hash_attack.t to work with Perl 5.14.4, 5.16.3 etc, which
  contain a fix for CVE-2013-1667 (memory exhaustion with arbitrary hash
  keys). This resolves rt.perl.org #116863, from where the patch was taken.
  [Hugo van der Sanden]
  use APR::Finfo instead of Perl's stat() in ModPerl::RegistryCooker to
  generate HTTP code 404 even if the requested filename contains newlines
  [Torsten]
- disable patch lfs-perl-5.14.patch as it no longer applies, but
  I can't find out if it's still need for ppc64 or if upstream's
  changes are good enough</changelog>
  <changelog author="ro@suse.de" date="1373976000">- change testsuite setup to fix build on factory:
  - do not load access_compat_module as it is builtin
  - do not load unixd_module as it is builtin</changelog>
  <changelog author="coolo@suse.com" date="1375704000">- add avoid-broken-provides.diff to avoid package providing
  HTTP::Request::Common, which it does not (only for testing)</changelog>
  <changelog author="vcizek@suse.com" date="1405944000">- Linux::Pid is required by Apache2-SizeLimit (bnc#888117)</changelog>
  <changelog author="vcizek@suse.com" date="1410264000">- adapt test configuration for apache24 to fix build
  * use the new access control mechanisms from apache24
  * added apache24-mod_authz_host.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1410955200">- Changed access control statements in config file to use
  mod_authz_host (bnc#897005)</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="3cc63696efbadad87af387a6704869627fccdfb516eb2969bc933b95ba990ef5" name="apache2-mod_perl" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="d4a4fa09ae0da638c91b873cca6172d19dfbb57ca7a22d56044d9d4dcbb84a0d" name="apache2-mod_perl-devel" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="tjcw@physics.org" date="1435320000">- turn off inlining for functions which need to be real symbols because they
  are called in a DSO
  * added inline.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438084800">- updated to 2.0.9: see Changes for details
  * dropped patches:
  - lfs-perl-5.14.patch
  - apache2-mod_perl-2.0.4-tests.diff
  - apache24-mod_authz_host.patch</changelog>
  <changelog author="schwab@suse.de" date="1438689600">- Force gnu89 inline semantics
- Disable tests only in QEMU user-space builds
- inline.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1439467200">- Remove apache2 packaging bug workaround</changelog>
  <changelog author="vcizek@suse.com" date="1450267200">- fix mod_perl with perl 5.22 (boo#945195)
  * add mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1475496000">- Remove unused icon and shorten the description a bit 1-2 migration
  is quite irelevant in these days
- Move tests to %check  phase
- Use proper group for devel subpackage</changelog>
  <changelog author="astieger@suse.com" date="1483099200">- update to 2.0.10:
  * Automatically select the appropriate c89 option when modperl is
    being built with either gcc 5 or clang
  * Fix non-threaded Perl 5.22.x build and tests
  * Add support for Perl 5.22.x
    drop upstreamed mod_perl-add_support_for_perl_5.22.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
</package>
<package pkgid="c3948322f82f7ff7f8cb7d2daa1282512ee3bb1367f122fe7da32b5f9fe9cfbf" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.12.1"/>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
</package>
<package pkgid="e1316e63e39e375927951c1a8a385fa400c91863d17927b6c933456987288a4f" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.12.1"/>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
</package>
<package pkgid="463ae32608f5ae6ba7138b09daa552596170383d8ac2ffa206a1c97d08b8d8fc" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.13.1"/>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
</package>
<package pkgid="437cbd3de2e52686e3ba8105e7710bdecf7ef7ab18927c13cdb34a4076c5068e" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.13.1"/>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
  <changelog author="pgajdos@suse.com" date="1570190400">- provide test results via multibuild :test [bsc#1119396]
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1572004800">- security update
- added patches
  CVE-2019-11043 [bsc#1154999]
  + php7-CVE-2019-11043.patch</changelog>
</package>
<package pkgid="f06e802353c1bd893d612bd82375f933df307721ae5b6ca831c8509f5a3c026e" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8e211b6d6f7ea12e13afa2e8585f9f15ef4a225cf74658aa7d5d42b630c88523" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="00ff809100c17cf61d5920adfa1611e321acdb5a5213a6dbd293c2a9bb95a42f" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b222a78d3bfd3556e533256e5446b5ddc1cdfd97bfde7cea3f2c3e0ed7e28b40" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="dfc8fa908d5190f774296e5de3794bca10c4df94becf35e2fae30df9400f56a7" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
</package>
<package pkgid="a1450a3cd7484b2edfef1b0322197146e2ba803459be3723bcfbfbe908ea13b0" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
</package>
<package pkgid="36dbcb3bd7e89614e6ff23db7214b6ba8f6169cacbbfbb9e9e579be5b0473db2" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="b289ab328cdbac675eae8498480fd1df1929cc609f0ca7671868b10f737d8a6a" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="c577cbc29b873bb25c67d2c44136454e596817e410266ad13a80ab746c8efa8d" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="67d3fa254aa082d90b663ae309e907d352c4cd8f908ef270c04545178464b24b" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="a9fdd4b7cfa93385390f239da20110dc2a9dcca8f78b8c71995e06c47a1fa748" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="778adf1d259158eeb67e138cd7fe5eb79d737147f1e12251f66d11b42a61e098" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="5755d051aacd5711ebeb6355c03e51f0491834842f43953e099555789c7107a7" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="a99c76e901788a20ef7015ff036d03c812c11d1c3ae0d80dd2c768d358564d30" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="28f926b3df4ae27a3fc739b569f1e2a34592ec4d96b6205278cf2c9a7a278769" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="d8e97503ac23b2e185b68b0c0c449ff50daeabb655fe82e0804248bcc2337ad0" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="f4aefde26aa0fc01aa5a65cd4c40410dda45c1ec0eba4f15d4619d1cc3290c01" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="ff084e4601bfb257611704299daa9f18af05cbce2ff4e3863ff47a38f6f7eb87" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.6.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="27ba972c3bc2417e601d6c6a1cde9df033ac05501067f26b59bb91416cf80bb3" name="apparmor" arch="src">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="33d51ccbb6c361d33e37a2ea053a304fa68777065dc87e434683ba23a0a55c3c" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="b2c6625fb92c5b0264282f9bfb8728052b8d6b5936fb9fdf76d29e4c9be23d4a" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="972b7b047abc48c74a489c751ff11dc2749447717cd3a3fec62b4bbccadb5e52" name="apparmor-parser" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="522aaaafaf75c8c1155f6e46ac40a83aea2433efdf138195e5b9b89b40f9adda" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="d4f4610f6a48012507a86162b9f343d41d411e7d39f3bf7c8db189f44e758590" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="a9887355e9449ac3485ae40983205f15b10faddd96c94ca3c689a72318a7fc2a" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="7fc06afe1ff96b78fe79d0594268728c983f386808d6f7c3287f050da78b85ff" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="c470ebb8377f3ab30a1ebc99468e8de7939853477c23f41409235c5fa5a4400f" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="2d1d6f75fb827d6be9dfb24a7e3fc1f4c5aac96d1f2c9a25e3a809bd1c86e416" name="arp-scan" arch="src">
  <version epoch="0" ver="1.9.6" rel="lp151.3.3.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1237550400">- Initial RPM</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1299499200">- update to 1.8:
  * the IEEE OUI and IAB files were updated
  * support was added for trailer ARP replies
  * support for LLC/SNAP packets with the 802.1Q tag was added
  * full help output is no longer displayed for usage errors
  * the license was changed from GPL v2 to v3
  * a DoS warning was added to the manpage and help output
  * new arp fingerprints were added
  * gcc compiler security options were enabled
  * the Perl scripts were modified to work on systems where the perl executable
    is not in /usr/bin
  * various minor bugfixes and improvements were made</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update to 1.9
- Cleanup spec file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1431000001">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
</package>
<package pkgid="1034bc679d3ef40399b01e8dda09f9152de006a243b4315d54d5720ad873d0f2" name="arp-scan" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="lp151.3.3.1"/>
  <changelog author="bitshuffler #suse@irc.freenode.org" date="1237550400">- Initial RPM</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1299499200">- update to 1.8:
  * the IEEE OUI and IAB files were updated
  * support was added for trailer ARP replies
  * support for LLC/SNAP packets with the 802.1Q tag was added
  * full help output is no longer displayed for usage errors
  * the license was changed from GPL v2 to v3
  * a DoS warning was added to the manpage and help output
  * new arp fingerprints were added
  * gcc compiler security options were enabled
  * the Perl scripts were modified to work on systems where the perl executable
    is not in /usr/bin
  * various minor bugfixes and improvements were made</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update to 1.9
- Cleanup spec file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1431000001">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
</package>
<package pkgid="a2ffc30651cf92605952d6a7d41fab9c4358d1051a5d1ec494d3759607159e75" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8510753c2156ca13df1180018b7e0b3be22558a4cc6c854f10451aae97263277" name="aubio-tools" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8d7e263ff31b46d649eff48637a26948d6e7a8e17ee107c69a768db7d9dfea08" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="af0d050faf3156492d68ed3c8c8baa28fa7aab2c4c8a70c1e3b5100539e6cb74" name="bash" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="6105682a89e91ac1fef3b868f6f711423bea52abb9fa919bea39df55bf1debb0" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="c65d17491325e5d7546a77a7f1b7390b0050c2434e5670025ed3f292aa6b3519" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="4d02d8c0804293dc3c6798a8d94db8e4ab6c2ea3e36430c19d7b4c17bc5cabf5" name="bash-devel" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="16bfb19843d22ed5662e737fe7138aff4505c7c851433b90de093305703d685a" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="4ca0294cc32b83963f3375b4c5ab9f9551b06f31179aa0fd8a4c102faf3b2e23" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="462c5166635bb9e3be7593992ad2c6612bbc25452dfbca02ed8bbbef5e07e52d" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="67207b7357a9637bfd071cee2bf4ffb5ec6a7b1990fbb250f8b83d91332b004d" name="bash-loadables" arch="i586">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="de8e08d3a9798ddaa090a8d11ec70913ae4236bf52f67eb8b513ed7d6ccd8d95" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="bda2ee3247cf4f6c9d0d153fc2268bea25ab0b82dca44fd9d2b961c241543d80" name="bcm20702a1-firmware" arch="noarch">
  <version epoch="0" ver="1201650" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Initial commit, adapted from AUR</changelog>
  <changelog author="tchvatal@suse.com" date="1455883200">- Convert to download on user machine rather than have unknown license file</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Update the filelist to avoid conflict with kernel-firmware</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Try to add modalias to auto install on hardware that requires it</changelog>
  <changelog author="matz.fuchs@gmx.at" date="1487073600">- Fix typo in filelist, add one additional firmware file</changelog>
  <changelog author="tiwai@suse.de" date="1540814400">- Fetch &amp; install another variant firmware (0a5c:21e8) (bsc#1087996)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Avoid bashisms in %post</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use https to fetch the archive bsc#1154083</changelog>
</package>
<package pkgid="1958e1911a7c000a90467530c1b8f5763958327e8455743d51ecfda978e90dac" name="bcm20702a1-firmware" arch="src">
  <version epoch="0" ver="1201650" rel="lp151.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Initial commit, adapted from AUR</changelog>
  <changelog author="tchvatal@suse.com" date="1455883200">- Convert to download on user machine rather than have unknown license file</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Update the filelist to avoid conflict with kernel-firmware</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Try to add modalias to auto install on hardware that requires it</changelog>
  <changelog author="matz.fuchs@gmx.at" date="1487073600">- Fix typo in filelist, add one additional firmware file</changelog>
  <changelog author="tiwai@suse.de" date="1540814400">- Fetch &amp; install another variant firmware (0a5c:21e8) (bsc#1087996)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Avoid bashisms in %post</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use https to fetch the archive bsc#1154083</changelog>
</package>
<package pkgid="447e0b838b691430903a34f60f8527a9ed11e77585d484cc40674175b1491fbf" name="bind" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="48f308496c963c14f9eef25f4bb619a8cc096734b28c5b502be09551599f1e18" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="101e6aad1a5db68b6455b188304d771682782d36f313c3037a8a06c5e5248f83" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d0823abb998f2473c3dd1dfb47828a783a0f743edce7239beb8b4740f02cd972" name="bind" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="a172c6697442f6068fc80bd00ee846396104ed82e33b1700505a09cc2c9c29ac" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="1d8c9b144fdcdb571ef7d2667981c24e0bd344bb27f8647a8f38553df7f3e570" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="81a1480f81864051bbbf2805f4f473d3c05c733cf7e3ffd32bf6458424ac1471" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8ad17b9506b7aca3fcc0d07065edced0d68d0cc29175b433688c64beaa98f185" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="460dff89398019efa4a0872c1eb2947977c47d3f14202f49c8ab93316bd2d31b" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="e870449277471088299d2f13fac825d488fde4f5b73a8df7343d8b0305ea5b89" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="01d0effddb6fc68156033906368aa2dd0a46caa6314e2e04884663002ed7a9e8" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d2380770a0980da814b8acb379f608aa8ce11550b158bcb7da2f0e9540de4ec9" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="37d9ec12a722956c3618c0c08fb384c58fec2c07caf5f7c12388acaccbcbf842" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="65c4af3562415fde9c66e9191fe798f8252e84c468521c6bd078af1d1370583c" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="1a0eed4072700e7a1d1296866cd1e4da4ddf0109b31cf3350a20b483034f9c21" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="db8bdec736529d53e65a4e20498ed5891dabe781ae4d1e9c7766a8c6471ecb02" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="49a474897df12ee1a442da1e43b273fadb399ba07d8fe4cc40e757b6052f0c4a" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="7399117365ae3475cb788d06cb6f3a4b7eed282709c2ee5f65f42667adc2468c" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="3f3838f42b7fde084d43c0fa1a7aa2aaec871f5076cb62fb3c41f7d0e54628bc" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4fef5a72ad2f4621ad65aa66c9f770f49c18d25c500d636fb8f80881c6f0d6d7" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="27a2ea693ebb2584c477e8eec2430f9a95ddd432687d50098f11bf38074493f7" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="ca4a62818b7e10cf6ada287d8bb0308829d6f2d12240b6879fdd3e71d57812e3" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="aad2685b6b58f1481cf3bd54fdd557fda8c7bee1a5cedb1bb528e263b0e50a2f" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="cb946c44efd26c5b5e97ee67f5b125c0b0b3ae6c3708e7e28c68feab31f73bd4" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="f628d6dce602c7dd0a84ce677506a34a560e9f5d75313523cf0083093582e181" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="86ee2d733e0d6a96f88d7dd0f940bbb48ef4b4bb5dbe4c1c6e3af1d14a49bb41" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="3a87aea61b03064731a3a1ecfb2454276b06af45338f8063cc87d4d70d864501" name="binutils" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c68dc38adb7ae1334c2d09e33e087f54776708c541eed4f522dc4f69a292543b" name="binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ec241a081da6d3000782f908ef04007566b7038605a2c29b4c8532845eea045f" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="17fa1eaf359612effb63c27d671a4312d3d5ad145a0ec1f65b2abb08c79a7237" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c095bedaa76c3f235c65e06b3f7e067cddc3ebfccbb656511c1fc5db88959cc5" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="628aa3f5ba0b5dd5838385423ac736bfbb79f2ddb42ed037c2f769636cbd76a2" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="d86652fdc1e7235fd57cf3c8f38fc93d5d2910de7d49ccf2a1eefedb4c87d190" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="3a383e3d40dfe58b3237563cb9a04566749324271f2380ead52cd28356854737" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b56144ab5fb5bd5ceb0b5b2f407b3f54011c7ca637d893a2733b02bf94a5b443" name="bird" arch="src">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="41625574d6b9489fefdf8f1c2860fef3a2818164794af90f4b1742d5881cec22" name="bird" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="220db5387d7e0b0e82c3eaa9a1191b6114902215eb120d62349330e4621827ac" name="bird-common" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="b40fdbba8f82ec19a20b5b6794c00c900754d0550de3b76cc1f7f0ef7aba252a" name="bird-doc" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="23cbe1637537dca90a259dd4145296d3f15a5d2371d3c0aed20fa68b1a896b4a" name="bird6" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1444996800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1445083200">- no longer run as root but as user/group bird.
- add tmpfiles.d file for /var/run/bird
- merged spec file from bird6 again</changelog>
  <changelog author="mrueckert@suse.de" date="1445083201">- add $BIRD_OPTIONS to the service files</changelog>
  <changelog author="mardnh@gmx.de" date="1466510400">- update to version 1.6.0
- if possible use /run instead of /var/run for the runtimedir
- removed patch: bird-1.5.0-rip_auth_bufferoverflow.patch
  A similar issue still exists but it's a false positive.</changelog>
  <changelog author="mrueckert@suse.de" date="1503057600">- update to 1.6.3
  - Large BGP communities
  - BFD authentication (MD5, SHA1)
  - SHA1 and SHA2 authentication for RIP and OSPF
  - Improved documentation
  - Several bug fixes
- changes from version 1.6.2
  - Fixes serious bug introduced in the previous version
- changes from version 1.6.1
  - Support for IPv6 ECMP
  - Better handling of IPv6 tentative addresses
  - Several updates and fixes in Babel protocol
  - Filter: New !~ operator
  - Filter: ASN ranges in bgpmask
  - KRT: New kernel protocol option 'metric'
  - KRT: New route attribute 'krt_scope'
  - Improved BIRD help messages
  - Fixes memory leak in BGP multipath
  - Fixes handling of empty path segments in BGP AS_PATH
  - Several bug fixes
- drop bird-1.5.0-rip_auth_bufferoverflow.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1503057601">- added bird-1.6.3_verbose.build.patch:
  - no longer print false CC lines
  - print the actuall gcc calls instead
- properly fix the FORTIFY_SOURCE fix from the earlier commit.
  - we just replace the -D_FORTIFY_SOURCE value with what we want
    instead of appending another value which leads to warnings</changelog>
  <changelog author="mrueckert@suse.de" date="1503057602">- ignore some warnings to make the output more readable</changelog>
  <changelog author="mrueckert@suse.de" date="1503057603">- downgrade to _FORTIFY_SOURCE=0 as 1 still fails on TW</changelog>
  <changelog author="mrueckert@suse.de" date="1503057604">- added potential fix for the bufferoverflow issue
  bufferoverflow.patch
  We will keep fortify_source 0 until the patch was discussed with
  upstream.</changelog>
  <changelog author="mardnh@gmx.de" date="1542196800">- Update to version 1.6.4
  * Basic VRF support
  * Simplified autoconf scripts
  * BGP: Shutdown communication (RFC 8203)
  * BGP: Allow exchanging LOCAL_PREF with eBGP peers
  * BGP: Allow to specify interface for regular sessions
  * BGP: New option 'disable after cease'
  * RAdv: Support for more specific routes (RFC 4191)
  * RAdv: Proper handling of prefix retraction
  * Filter: Allow silent filter execution
  * Filter: Fixed stack overflow in BGP mask expressions.
  * Several bug fixes</changelog>
  <changelog author="mardnh@gmx.de" date="1544097600">- Specfile cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Kill off em dashes in summaries. Remove future
  aims from descriptions.</changelog>
  <changelog author="mardnh@gmx.de" date="1549195200">- Update to version 1.6.5
  * MRT table dumps (RFC 6396)
  * BGP Long-lived graceful restart
  * Filter: Make ifname attribute modifiable
  * Improved keeping track of IPv6 link-local addresses
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551441600">- Update to version 1.6.6
  * Several bugfixes related to route propagation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1568808000">- Update to version 1.6.8
  * Fix CVE-2019-16159:
    BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through
    2.0.5 has a stack-based buffer overflow. The BGP daemon's
    support for RFC 8203 administrative shutdown communication
    messages included an incorrect logical expression when checking
    the validity of an input message. Sending a shutdown
    communication with a sufficient message length causes a four-byte
    overflow to occur while processing the message, where two of the
    overflow bytes are attacker-controlled and two are fixed.
  * Several important bugfixes
  * BFD: Support for VRFs</changelog>
</package>
<package pkgid="ce97aa8f28072a8d6239201fc8758fc70c6709f87af2001de8853f2db843185b" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="76744b989a1fcfc4823c491052ab26f6803639faf4a9f6eb673ccf499945c85b" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="2a65c4c8649cdae1c2d26a34f66d75e845659828b20a06e8a3d163c8aaf54b21" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="e6ae1ce7581e3b146e790e6cd7efc966ac641ba8e5263619b0d641e5459fb6f5" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="74663c29ad66d6a10d0eec2227efef7606861d17d1bebb2dffd5a1a678f2fb29" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="719cdfccd86732c154113934e291d1c85a292c12e5a71e407fd8d87a6d879532" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="21e323128e518566bfaeacb30c793f4279cbec6894efc5164cb97cf306be8fc3" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="bdc704731de9779262ac47348d9f278e8f7be0da92a78e50067080a483c6be9a" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="05abbd9f3aa1403a6aa77b2f7206a7913d3f40ff74235eb88bc7763468be273d" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="f97f4c75e0b24548c940bd50bf36ecad1979559c9ee7a8f7ba85bf996c53d0ea" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="d0c9abbbb746425e78e3abb6cf6f857c27aebb6e9b2fe30489c3017cdb3be52a" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="c2f8f09c10390f40758e31f9094689acee729d95f90ae8188b523282f15a2545" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="08cdb01c0fb9f2825389a2991494c45fcc4e5cd466ea1f13fd90a20e1f15a74c" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="1ed5111af6abdc9e44f691f62723f4744daaecc307db90be175e9fb7a127add4" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="145475426a71ad3273cdb938f2791e2f4d7fc65684bb99dcd1529dd302e539bc" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="70f6cc3eeeb8a60f51a3a8d62c2472f3f8792de9affe2cc8a73486b95cf19c88" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="be05208cb08de85f49b4fbb191ee2fb8958c4d1b21df98ce85912d7b12540001" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="faea4a1ec532e7620f285592a77c30844bd7885f92e1e819465621c1eae38d95" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="7fbafd4303f4933c95496131c43a6fb1f545982f38207b9ad471969dac1c816f" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="64a0aee8b16182396a9ad9fabc70cb3d98c86d3d6bf2f86b1bc4bc3b015a48ae" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="bb078e29b1667a3fc02dca7ec4c682e9ac7cfb3906f5f17c02dfd0734b87198f" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="be091aa93ae486db22d45db258eecfdedf98b17cf2605c9a6dcfb7ea3c6e75a5" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="2b021fbaf3af6ff6e5f096b9a04a046f867ea2731ce41f0d42eca70ee359a7d0" name="borgbackup" arch="src">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="5b39da2bf4fb30dfa3406e5298a133f141b850abfbddd67b03ff132b55ea2ee1" name="borgbackup" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="146bfa4c16d04bbd5450fc582b3d296f2fa08c306b0f5c14cb4dcb63a61a4bbd" name="borgbackup-bash-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="38b230e4461e0fad672b704682eeaccb5847fb563a68e1713f0de08edff3ba88" name="borgbackup-doc" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="9b3fb7aa2f51f789f9a34c91c3da35974bb62c483a7dda9b2f7352c2bb0cc802" name="borgbackup-fish-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="d2a6de3dc8a8b2bd463b27f5d38887a5a3c5c09f1ad3fb2289d1a2226392bbf4" name="borgbackup-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.1.9" rel="lp151.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1510315200">- Fix build on Leap 42.2 by BuildRequiring bash-completion</changelog>
  <changelog author="alarrosa@suse.com" date="1512993600">- Update to borgbackup 1.1.3
- Fixes:
  * Security Fix for CVE-2017-15914: Incorrect implementation of access
    controls allows remote users to override repository restrictions in Borg
    servers. A user able to access a remote Borg SSH server is able to
    circumvent access controls post-authentication.
    Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0.x are NOT affected.
  * crc32: deal with unaligned buffer, add tests - this broke borg on older ARM
    CPUs that can not deal with unaligned 32bit memory accesses and raise a bus
    error in such cases. the fix might also improve performance on some CPUs as
    all 32bit memory accesses by the crc32 code are properly aligned now.
  * mount: fixed support of --consider-part-files and do not show .borg_part_N
    files by default in the mounted FUSE filesystem.
  * fixed cache/repo timestamp inconsistency message, highlight that
    information is obtained from security dir (deleting the cache will not
    bypass this error in case the user knows this is a legitimate repo).
  * borgfs: don't show sub-command in borgfs help
  * create: show an error when --dry-run and --stats are used together
- New features:
  * mount: added exclusion group options and paths.
    Reused some code to support similar options/paths as borg extract offers -
    making good use of these to only mount a smaller subset of dirs/files can
    speed up mounting a lot and also will consume way less memory.
    borg mount [options] repo_or_archive mountpoint path [paths...]
    paths: you can just give some "root paths" (like for borg extract) to only
    partially populate the FUSE filesystem.
    new options: --exclude[-from], --pattern[s-from], --strip-components
  * create/extract: support st_birthtime on platforms supporting it
  * add "borg config" command for querying/setting/deleting config values
- Other changes:
  * clean up and simplify packaging (only package committed files,
  do not install .c/.h/.pyx files)
  * docs:
  * point out tuning options for borg create
  * add instructions for using ntfsclone, zerofree
  * move image backup-related FAQ entries to a new page
  * clarify key aliases for borg list --format
  * mention break-lock in checkpointing FAQ entry
  * document sshfs rename workaround
  * add FAQ about removing files from existing archives
  * add FAQ about different prune policies
  * usage and man page for borgfs
  * clarify create --stats duration vs. wall time
  * clarify encrypted key format for borg key export
  * update release checklist about security fixes
  * document good and problematic option placements, fix examples
  * add note on using --nobsdflags to avoid speed penalty related to bsdflags
  * move most of support section to www.borgbackup.org</changelog>
  <changelog author="alarrosa@suse.com" date="1515585600">- Update to borgbackup 1.1.4
  * Fix a potential data corruption issue with 'borg check --repair'
    happening in borg &gt;= 1.1 and &lt; 1.1.4
  * zstd compression is new in borg 1.1.4, older borg can't handle it.
  * new minimum requirements for the compression libraries:
    + added requirement: libzstd &gt;= 1.3.0
    + updated requirement: liblz4 &gt;= 1.7.0 / r129
- Fixes:
  * check: data corruption fix: fix for borg check --repair malfunction. See
  the more detailed notes at
  https://github.com/borgbackup/borg/blob/1.1.4/docs/changes.rst
  * delete: also delete security dir when deleting a repo
  * prune: fix building the "borg prune" man page
  * init: use given --storage-quota for local repo
  * init: properly quote repo path in output
  * fix startup delay with dns-only own fqdn resolving
- New features:
  * added zstd compression.
  * added placeholder {reverse-fqdn} for fqdn in reverse notation
  * added BORG_BASE_DIR environment variable
- Other changes:
  * list help topics when invalid topic is requested
  * fix lz4 deprecation warning, requires lz4 &gt;= 1.7.0 (r129)
  * add parens for C preprocessor macro argument usages (did not cause
    malfunction)
  * exclude broken pytest 3.3.0 release
  * updated fish/bash completions
  * init: more clear exception messages for borg create
  * docs:
    + add auto-generated docs for borg config
    + don't generate HTML docs page for borgfs
    + docs update for lz4 b2 zstd changes
    + add zstd to compression help, readme, docs
    + update requirements and install docs about bundled lz4 and zstd
    + refactored build of the compress and crypto.low_level extensions
    + move some lib/build related code to setup_{zstd,lz4,b2}.py
    + bundle lz4 1.8.0 (requirement: &gt;= 1.7.0 / r129)
    + bundle zstd 1.3.2 (requirement: &gt;= 1.3.0)
    + blake2 was already bundled
    + rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better
    consistency: we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
    + add prefer_system_lib* = True settings to setup.py - by default the
    build will prefer a shared library over the bundled code, if library
    and headers can be found and meet the minimum requirements.</changelog>
  <changelog author="alarrosa@suse.com" date="1517140800">- Don't use liblz4 nor libzstd on Leap 42.x which doesn't support them
  and add missing requirement python-guzzle_sphinx_theme on Tumbleweed.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1519732800">- Add patch borgbackup-1.1.4-binary-content-checks.patch:
  * Fixes build failure due to bad encoding
  * Based on upstream commit 9cf8d57 "do .h file content checks in binary mode"
  * This patch will no longer be needed with borgbackup &gt; 1.1.4</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Add patch to require the new msgpack python module in Tumbleweed
  instead of the deprecated msgpack-python python module:
  * fix-msgpack-requirement.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520164800">- Add patch to fall back to a sphinx default theme for older distributions
  that don't have python3-guzzle_sphinx_theme available
  * borgbackup-1.1.4-sphinx-default-theme.patch</changelog>
  <changelog author="hpj@urpla.net" date="1520251200">- Fix sphinx theme fallback condition</changelog>
  <changelog author="alarrosa@suse.com" date="1522670400">- Update to 1.1.5
- Fixes:
  * create --list: fix that it was never showing M status
  * create: fix timing for first checkpoint (read files cache early,
    init checkpoint timer after that)
  * extract: set rc=1 when extracting damaged files with all-zero replacement
    chunks or with size inconsistencies
  * diff: consider an empty file as different to a non-existing file
  * files cache: improve exception handling
  * ignore exceptions in scandir_inorder() caused by an implicit stat(), also
    remove unneeded sort
  * fixed tab completion problem where a space is always added after path even
    when it shouldn't
  * build: do .h file content checks in binary mode, fixes build issue for
    non-ascii header files on pure-ascii locale platforms
  * borgfs: fix patterns/paths processing
  * config: add some validation
  * repository config: add validation for max_segment_size
  * set cache previous_location on load instead of save
  * remove platform.uname() call which caused library mismatch issues
  * add exception handler around deprecated platform.linux_distribution() call
  * use same datetime object for {now} and {utcnow}
- New features:
  * create: implement --stdin-name
  * add chunker_params to borg archive info (--json)
  * BORG_SHOW_SYSINFO=no to hide system information from exceptions
- Other changes:
  * updated zsh completions for borg 1.1.4
  * files cache related code cleanups
  * be more helpful when parsing invalid --pattern values
  * be more clear in secure-erase warning message
  * improve getpass user experience
  * docs build: unicode problem fixed when using a py27-based sphinx
- docs:
  * security: explicitly note what happens OUTSIDE the attack model
  * security: add note about combining compression and encryption
  * security: describe chunk size / proximity issue
  * quickstart: add note about permissions, borg@localhost
  * quickstart: add introduction to repositories &amp; archives
  * recreate --recompress: add missing metavar, clarify description
  * improve logging docs
  * add an example for --pattern usage
  * clarify path semantics when matching
  * link to offline documentation from README
  * add docs on how to verify a signed release with GPG
  * chunk seed is generated per repository (not: archive)
  * better formatting of CPU usage documentation
  * extend append-only repo rollback docs
- tests:
  * fix erroneously skipped zstd compressor tests
  * skip a test if argparse is broken
- Drop borgbackup-1.1.4-binary-content-checks.patch which is already included
  upstream.
- Rebase fix-msgpack-requirement.patch</changelog>
  <changelog author="mlin@suse.com" date="1525262400">- Leap 15.0 and SLE15 both are moved to renamed python3-msgpack,
  fix-msgpack-requirement.patch have to be used to deal with msgpack
  package rename fallout.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added borgbackup.keyring, which contains the key from the author</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to 1.1.6:
  - Fixes
  - fix borg exception handling on ENOSPC error with xattrs
  - prune: fix/improve overall progress display
  - borg config repo ... does not need cache/manifest/key
  - New features
  - mount: add uid, gid, umask mount options
  - delete:
  - only commit once
  - implement --dry-run
  - check:
  - show progress while rebuilding missing manifest
  - more --repair output
  - borg config --list &lt;repo&gt;</changelog>
  <changelog author="kbabioch@suse.com" date="1533988800">- Update to 1.1.7:
  - Fixes
  - cache lock: use lock_wait everywhere to fix infinite wait
  - don't archive tagged dir when recursing an excluded dir
  - New features
  - init: add warning to store both key and passphrase at safe place(s)
  - BORG_HOST_ID env var to work around all-zero MAC address issue
  - borg debug dump-repo-objs --ghost (dump everything from segment files,
    including deleted or superceded objects or commit tags)
  - borg debug search-repo-objs (search in repo objects for hex bytes or strings)
  - Other changes:
  - add Python 3.7 support
  - updated shell completions
  - locking: better logging, add some asserts</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to 1.1.8:
  - Fixes
  - enforce storage quota if set by serve-command
  - invalid locations: give err msg containing parsed location
  - list repo: add placeholders for hostname and username
  - symlinks can't have ACLs, so don't try to set any
  - New features
  - create: added PATH::archive output on INFO log level
  - read a passphrase from a file descriptor specified in the BORG_PASSPHRASE_FD environment variable.
  - docs:
  - option --format is required for some expensive-to-compute values for json
  - borg list by default does not compute expensive values except when they
    are needed. whether they are needed is determined by the format, in
    standard mode as well as in --json mode.
  - fixed wrong archive name pattern in CRUD benchmark help
  - fixed link to cachedir spec in docs
  - tests:
  - stop using fakeroot on travis, avoids sporadic EISDIR errors
  - xattr key names must start with "user." on linux
  - fix code so flake8 3.6 does not complain
  - explicitly convert environment variable to str
  - fix DeprecationWarning: Flags not at the start of the expression
  - support pytest4</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549195200">- Add conditionals to control various build aspects distribution
  agnostic</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549886400">- Update to 1.1.9:
  - Fixes:
  - security fix: configure FUSE with "default_permissions",
    gh#borgbackup/borg#3903 "default_permissions" is now enforced by borg by
    default to let the kernel check uid/gid/mode based permissions.
    "ignore_permissions" can be given to not enforce "default_permissions".
  - make ?hostname? short, even on misconfigured systems,
    gh#borgbackup/borg#4262
  - fix free space calculation on macOS (and others?),
    gh#borgbackup/borg#4289
  - config: quit with error message when no key is provided,
    gh#borgbackup/borg#4223
  - recover_segment: handle too small segment files correctly,
    gh#borgbackup/borg#4272
  - correctly release memoryview, gh#borgbackup/borg#4243
  - avoid diaper pattern in configparser by opening files,
    gh#borgbackup/borg#4263
  - add "# cython: language_level=3" directive to .pyx
    files, #4214
  - info: consider part files for "This archive" stats,
    gh#borgbackup/borg#3522
  - work around Microsoft WSL issue gh#borgbackup/borg#645 (sync_file_range),
    [#1961]
  - New features:
  - add ?rsh command line option to complement BORG_RSH env var,
    gh#borgbackup/borg#1701
  - init: -make-parent-dirs parent1/parent2/repo_dir, gh#borgbackup/borg#4235
  - Other:
  - add archive name to check -repair output, gh#borgbackup/borg#3447
  - check for unsupported msgpack versions
  - shell completions:
  - new shell completions for borg 1.1.9
  - more complete shell completions for borg mount -o
  - added shell completions for borg help
  - option arguments for zsh tab completion
  - docs:
  - add FAQ regarding free disk space check, gh#borgbackup/borg#3905
  - update BORG_PASSCOMMAND example and clarify variable expansion,
    gh#borgbackup/borg#4249
  - FAQ regarding change of compression settings, gh#borgbackup/borg#4222
  - add note about BSD flags to changelog, gh#borgbackup/borg#4246
  - improve logging in example automation script
  - add note about files changing during backup, gh#borgbackup/borg#4081
  - work around the backslash issue, gh#borgbackup/borg#4280
  - update release workflow using twine (docs, scripts),
    gh#borgbackup/borg#4213
  - add warnings on repository copies to avoid future problems,
    gh#borgbackup/borg#4272
  - tests:
  - fix the homebrew 1.9 issues on travis-ci, gh#borgbackup/borg#4254
  - fix duplicate test method name, gh#borgbackup/borg#4311
- Moved the docs to a new -doc subpackage
- Use the %license tag for the license</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549886401">- Update RPM groups.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Modify patch fix-msgpack-requirement.patch to allow msgpack-0.5.4
  as well. See patch for discussion.
- Clean-up dependency blocks</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1552046400">- According to upstream preference and dealing with msgpack update
  in Factory, allow msgpack &lt;= 0.6.1 as well</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Require python3-setuptools since it's needed when running borg
  to find the entry point (boo#1134650)</changelog>
</package>
<package pkgid="decbd8d9edd7f125544933b6ce1c964b52055a9dfff5ba7ecff67317e2b07bca" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="04f287d7f275a9143ad91c2ecb9148e54cd892bb6dc301705f45fc1b15f35cdd" name="brlapi-java" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="621dfd1732c32dfb370e6d740798c468c114197a03951204ca09fe1e46059f06" name="brltty" arch="src">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="e23e1498ba1f042469a57892957e9e1794006e1a6563ca9e04611134c9cd947a" name="brltty" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="478fae282da18b643d4e6eb54c340ad46425cc9fe3d27696017a73f18f88625d" name="brltty-driver-at-spi2" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="067cb00d25756412146f92ceafbcf2e209cf29f16dfe26a6dc457fb22987af69" name="brltty-driver-brlapi" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="67df847b98fbc7412811915895e65c7cd626702bee312a7cf5525eddd1dc9835" name="brltty-driver-espeak" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="f9ae59e556181190baa89a6f1c02fdfb7fcc7b6e319ed5682b8046e406a62d9f" name="brltty-driver-libbraille" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="2c092da2991cd959fc0310a7ecda3e5b6764e8e03c15a0e2a4e0001634857be1" name="brltty-driver-speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="2507d4518696f8e65ea126dd37186ae54c8d5bcfaa97f5c02bc31617a5f6b2da" name="brltty-driver-xwindow" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="a44242526649181e49d10c0b202221af9dd50a207ead6e082a705d22b2750dbc" name="brltty-lang" arch="noarch">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="13d96a473b5380124655d03ed35532e6747bcc0591efc840c4285ed91d1c9b0c" name="brltty-utils" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="0a8c137b7933c2b5b328ebe08b7bfb662452e6857232903f8da236fab733fa70" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="4aa5070c2acaf08d806879441592cba0f1b819d20e4838b87117958e36ded16b" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1331294400">- Add brp-check-xdg-menus.patch: Accept all icons specified in icon
  naming spec.</changelog>
  <changelog author="ro@suse.de" date="1331640000">- integrate brp-check-xdg-menus.patch (and add to git)
- ignore empty elements in rpath</changelog>
  <changelog author="coolo@suse.com" date="1341144000">- do not allow symlinks to point to itself (not existant as result)</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- document the need for full perl</changelog>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116800">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116801">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="955032da311f93f48455e0deabf5327873d98fa62799ae68dd43ea226b9c76dd" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp151.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
</package>
<package pkgid="0020ad7a35b84bc3ecdec27035e19bea12f3ff38bf3b61c950e37ba281f9706d" name="bsdtar" arch="i586">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="cc4adc78a7d7f79fb5c3d5096852efd5a870fd4bf8fc9eaf2dc0db5a1e4b1eff" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="0e674f927446ef3bcc585ba70baa6c74cd40db9f56bdbac066f70f48a3e30e16" name="bubblewrap" arch="i586">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="5bd43bffdb8f3d9621d1afff3f2d207695b1b67ffbad4b00f38950ccf9af3a80" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="015c277c83af83593d0fd13d28ac499c3791728d7e50aace0376e6c0a13e1d0c" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="50d17685d387a2e40c42cecb220bca40b6ecca0089c214b5718f8cd0ddd2c53e" name="buildah" arch="src">
  <version epoch="0" ver="1.7.1" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520337600">- Package buildah v0.12.  Buildah is a tool to build OCI images, and is used
  by podman-build.</changelog>
  <changelog author="vrothberg@suse.com" date="1522324800">- Fix `buildah version` by compiling the build date into the binary.</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Change build date to SOURCE_DATE_EPOCH to make builds reproducible.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1528372800">- Update buildah to v1.0:
  * Update option and documentation for --force-rm
  * Update buildah run to make command required
  * Do not print directly to stdout in Commit()
  * Force "localhost" as a default registry
  * Validate host and container paths passed to --volume
  * Add --compress, --rm, --squash flags as a noop for bud
  * Add FIPS mode secret to buildah run and bud
  * Add config --comment/--domainname/--history-comment/--hostname
  * 'buildah config': stop replacing Created-By whenever it's not specified
  * Modify man pages so they compile correctly in mandb
  * Add description on how to do --isolation to buildah-bud man page
  * Add support for --iidfile to bud and commit
  * Remove tarball as an option from buildah push --help
  * Fix secrets patch
  * Display imageId after commit
  * config: add support for StopSignal
  * Allow referencing stages as index and names
  * Add multi-stage builds support
  * Allow umount to have multi-containers
  * buildah bud walks symlinks
  * Allow --cmd parameter to have commands as values
  * Make default-mounts-file a hidden option
  * Add various transport support to buildah from
  * shallowCopy: avoid a second read of the container's layer
  * Add openSUSE in install section
  * run: do not open /etc/hosts if not needed</changelog>
  <changelog author="jengelh@inai.de" date="1528632000">- Use noun phrase in summary.</changelog>
  <changelog author="vrothberg@suse.com" date="1528718400">- Update buildah to v1.1:
  * Drop capabilities if running container processes as non root
  * Print Warning message if cmd will not be used based on entrypoint
  * Shouldn't add insecure registries to list of search registries
  * Report errors on bad transports specification when pushing images
  * Add disable-content-trust noop flag to bud
  * runCopyStdio(): don't close stdin unless we saw POLLHUP
  * Add registry errors for pull
  * Give better messages to users when image can not be found
  * Add environment variable to buildah --format
  * Accept json array input for config entrypoint
  * Add OnBuild support for Dockerfiles
  * buildah bud should require a context directory or URL
  * buildah bud picks up ENV from base image
  * Add CLI options for specifying namespace and cgroup setup
  * Read UID/GID mapping information from containers and images
  * build-using-dockerfile: add --annotation
  * Implement --squash for build-using-dockerfile and commit
  * Vendor in latest container/storage for devicemapper support
  * Test with Go 1.10, too
  * Handle /etc/hosts and /etc/resolv.conf properly in container
  * Add support for buildah bud --label
  * buildah push/from can push and pull images with no reference
  * builder-inspect: fix format option
  * Add cpu-shares short flag (-c) and cpu-shares CI tests</changelog>
  <changelog author="vrothberg@suse.com" date="1531742400">- Update buildah to v1.2:
  * build-using-dockerfile: let -t include transports again
  * Block use of /proc/acpi and /proc/keys from inside containers
  * Fix handling of -registries-conf
  * Add -cidfile option to from
  * Add a -loglevel option to build-with-dockerfile
  * docs: Follow man-pages(7) suggestions for SYNOPSIS
  * umount: add all option to umount all mounted containers
  * Fix buildah bud -layers
  * Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  * build without seccomp
  * Add Capabilities lists to BuilderInfo
  * Fix ARGS parsing for run commands
  * Add info on registries.conf to from manpage
  * mount: support multiple inputs
  * Allow -userns-uid-map/-userns-gid-map to be global options
  * Add -rm and -force-rm to buildah bud
  * Add -all,-a flag to buildah images
  * Add environment variable BUILDAH_RUNTIME
  * Add -layers and -no-cache to buildah bud
  * Change 'registries' to 'container registries' in man
  * Add registries.conf link to a few man pages
- install missing buildah (1) manpage
- install bash completion at /usr/share/bash-completion/completions
- buildmode=pie: build position independent code</changelog>
  <changelog author="vrothberg@suse.com" date="1533556800">- Update buildah to v1.3:
  * bud should not search context directory for Dockerfile
  * Set BUILDAH_ISOLATION=rootless when running unprivileged
  * Fix rmi to remove intermediate images associated with an image
  * Set the default ulimits to match Docker
  * buildah: no args is out of bounds
  * preprocess ".in" suffixed Dockerfiles
  * Add support for multiple Short options
  * Update to latest urvave/cli
  * Create buildah pull command
  * Allow ping command without NET_RAW Capabilities
  * Allow Dockerfile content to come from stdin
  * add rename command
  * Completion command
  * Update vendor for runc to fix 32 bit builds</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1536148800">- Set the correct commit for `buildah version`.
- Set the cnilib version for `buildah version`.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538568000">- Changelog for v1.4 (2018-10-02)
  * Touchup pull manpage
  * Export buildah ReserveSELinuxLables so podman can use it
  * Update rmi man for prune changes
  * Copy ExposedPorts from base image into the config
  * Change rmi --prune to not accept an imageID
  * Builtin volumes should be owned by the UID/GID of the container
  * Move buildah from projecatatomic/buildah to containers/buildah
  * bash: Completion options
  * Don't build btrfs if it is not installed
  * Push: Allow an empty destination
  * Fix arg usage in buildah-tag
  * Evaluate symbolic links on Add/Copy Commands
  * Retain bounding set when running containers as non root
  * push: show image digest after push succeed
  * Exclude --layers from the common bug cli flags
  * Make buildah-from error message clear when flags are after arg
  * Warn about using Commands in Dockerfile that are not supported by OCI.
  * Document BUILDAH_* environment variables in buildah bud --help output
  * Fix --layers ADD from url issue
  * Display the correct ID after deleting image
  * Handle COPY --chown in Dockerfile
  * Document STORAGE_DRIVER and STORAGE_OPTS environment variable
  * Expand variables names for --env</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1541332800">- Require slirp4netns to enable networking for unprivileged network namespaces
  aka networking for rootless buildah.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542974400">- Changelog for v1.5-1 (2018-11-21)
  * Print command in SystemExec as debug information
  * Sort CLI flags
  * Update imagebuild depdency to support heading ARGs in Dockerfile
  * rootless: do not specify --rootless to the OCI runtime
  * Exclude --force-rm from common bud cli flags
  * run: bind mount /etc/hosts and /etc/resolv.conf if not in a volume
  * rootless: use slirp4netns to setup the network namespace
  * rootless: only discard network configuration names
  * run: only set up /etc/hosts or /etc/resolv.conf with network
  * Handle directories better in bud -f
  * common: support a per-user registries conf file
  * unshare: do not override the configuration
  * common: honor the rootless configuration file
  * unshare: create a new mount namespace
  * unshare: support libpod rootless pkg
  * Allow container storage to manage the SELinux labels
  * imagebuilder.BuildDockerfiles: return the image ID
  * Allow setting --no-pivot default with an env var
  * Add man page and bash completion, for --no-pivot
  * Add the --no-pivot flag to the run command
  * Improve reporting about individual pull failures
  * Fix From As in Dockerfile
  * Sort CLI flags of buildah bud
  * unshare: detect when unprivileged userns are disabled
  * buildah: use the same logic for XDG_RUNTIME_DIR as podman
  * Make sure we log or return every error
  * Correctly set DockerInsecureSkipTLSVerify when pulling images
  * chroot: set up seccomp and capabilities after supplemental groups
  * chroot: fix capabilities list setup and application</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Update to v1.6
  * unshare: do not set USER=root
  * run: ignore EIO when flushing at the end, avoid double log
  * build-using-dockerfile,commit: disable compression by default
  * Make rootless work under no_pivot_root
  * Properly format images JSON output
  * Assume user 0 group 0, if /etc/passwd file in container.
  * Add buildah info command
- Full changelog: https://github.com/containers/buildah/releases/tag/v1.6</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551182400">- Update to v1.7
  * vendor containers/image v1.4
  * Make "images --all" faster
  * Remove quiet option from pull options
  * Support oci layout format</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551441600">- Update to v1.7.1
  * Minor fix to vendor in github.com/containers/image 1.5 version
  * This fixes a crash on pulling of images
- Stop building from specific commit</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
</package>
<package pkgid="e9a72e4131db9d3add9f6c3d8f3699e306f7333e8c1072de22f9b30701828914" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520337600">- Package buildah v0.12.  Buildah is a tool to build OCI images, and is used
  by podman-build.</changelog>
  <changelog author="vrothberg@suse.com" date="1522324800">- Fix `buildah version` by compiling the build date into the binary.</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Change build date to SOURCE_DATE_EPOCH to make builds reproducible.</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="vrothberg@suse.com" date="1528372800">- Update buildah to v1.0:
  * Update option and documentation for --force-rm
  * Update buildah run to make command required
  * Do not print directly to stdout in Commit()
  * Force "localhost" as a default registry
  * Validate host and container paths passed to --volume
  * Add --compress, --rm, --squash flags as a noop for bud
  * Add FIPS mode secret to buildah run and bud
  * Add config --comment/--domainname/--history-comment/--hostname
  * 'buildah config': stop replacing Created-By whenever it's not specified
  * Modify man pages so they compile correctly in mandb
  * Add description on how to do --isolation to buildah-bud man page
  * Add support for --iidfile to bud and commit
  * Remove tarball as an option from buildah push --help
  * Fix secrets patch
  * Display imageId after commit
  * config: add support for StopSignal
  * Allow referencing stages as index and names
  * Add multi-stage builds support
  * Allow umount to have multi-containers
  * buildah bud walks symlinks
  * Allow --cmd parameter to have commands as values
  * Make default-mounts-file a hidden option
  * Add various transport support to buildah from
  * shallowCopy: avoid a second read of the container's layer
  * Add openSUSE in install section
  * run: do not open /etc/hosts if not needed</changelog>
  <changelog author="jengelh@inai.de" date="1528632000">- Use noun phrase in summary.</changelog>
  <changelog author="vrothberg@suse.com" date="1528718400">- Update buildah to v1.1:
  * Drop capabilities if running container processes as non root
  * Print Warning message if cmd will not be used based on entrypoint
  * Shouldn't add insecure registries to list of search registries
  * Report errors on bad transports specification when pushing images
  * Add disable-content-trust noop flag to bud
  * runCopyStdio(): don't close stdin unless we saw POLLHUP
  * Add registry errors for pull
  * Give better messages to users when image can not be found
  * Add environment variable to buildah --format
  * Accept json array input for config entrypoint
  * Add OnBuild support for Dockerfiles
  * buildah bud should require a context directory or URL
  * buildah bud picks up ENV from base image
  * Add CLI options for specifying namespace and cgroup setup
  * Read UID/GID mapping information from containers and images
  * build-using-dockerfile: add --annotation
  * Implement --squash for build-using-dockerfile and commit
  * Vendor in latest container/storage for devicemapper support
  * Test with Go 1.10, too
  * Handle /etc/hosts and /etc/resolv.conf properly in container
  * Add support for buildah bud --label
  * buildah push/from can push and pull images with no reference
  * builder-inspect: fix format option
  * Add cpu-shares short flag (-c) and cpu-shares CI tests</changelog>
  <changelog author="vrothberg@suse.com" date="1531742400">- Update buildah to v1.2:
  * build-using-dockerfile: let -t include transports again
  * Block use of /proc/acpi and /proc/keys from inside containers
  * Fix handling of -registries-conf
  * Add -cidfile option to from
  * Add a -loglevel option to build-with-dockerfile
  * docs: Follow man-pages(7) suggestions for SYNOPSIS
  * umount: add all option to umount all mounted containers
  * Fix buildah bud -layers
  * Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  * build without seccomp
  * Add Capabilities lists to BuilderInfo
  * Fix ARGS parsing for run commands
  * Add info on registries.conf to from manpage
  * mount: support multiple inputs
  * Allow -userns-uid-map/-userns-gid-map to be global options
  * Add -rm and -force-rm to buildah bud
  * Add -all,-a flag to buildah images
  * Add environment variable BUILDAH_RUNTIME
  * Add -layers and -no-cache to buildah bud
  * Change 'registries' to 'container registries' in man
  * Add registries.conf link to a few man pages
- install missing buildah (1) manpage
- install bash completion at /usr/share/bash-completion/completions
- buildmode=pie: build position independent code</changelog>
  <changelog author="vrothberg@suse.com" date="1533556800">- Update buildah to v1.3:
  * bud should not search context directory for Dockerfile
  * Set BUILDAH_ISOLATION=rootless when running unprivileged
  * Fix rmi to remove intermediate images associated with an image
  * Set the default ulimits to match Docker
  * buildah: no args is out of bounds
  * preprocess ".in" suffixed Dockerfiles
  * Add support for multiple Short options
  * Update to latest urvave/cli
  * Create buildah pull command
  * Allow ping command without NET_RAW Capabilities
  * Allow Dockerfile content to come from stdin
  * add rename command
  * Completion command
  * Update vendor for runc to fix 32 bit builds</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1536148800">- Set the correct commit for `buildah version`.
- Set the cnilib version for `buildah version`.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1538568000">- Changelog for v1.4 (2018-10-02)
  * Touchup pull manpage
  * Export buildah ReserveSELinuxLables so podman can use it
  * Update rmi man for prune changes
  * Copy ExposedPorts from base image into the config
  * Change rmi --prune to not accept an imageID
  * Builtin volumes should be owned by the UID/GID of the container
  * Move buildah from projecatatomic/buildah to containers/buildah
  * bash: Completion options
  * Don't build btrfs if it is not installed
  * Push: Allow an empty destination
  * Fix arg usage in buildah-tag
  * Evaluate symbolic links on Add/Copy Commands
  * Retain bounding set when running containers as non root
  * push: show image digest after push succeed
  * Exclude --layers from the common bug cli flags
  * Make buildah-from error message clear when flags are after arg
  * Warn about using Commands in Dockerfile that are not supported by OCI.
  * Document BUILDAH_* environment variables in buildah bud --help output
  * Fix --layers ADD from url issue
  * Display the correct ID after deleting image
  * Handle COPY --chown in Dockerfile
  * Document STORAGE_DRIVER and STORAGE_OPTS environment variable
  * Expand variables names for --env</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1541332800">- Require slirp4netns to enable networking for unprivileged network namespaces
  aka networking for rootless buildah.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542974400">- Changelog for v1.5-1 (2018-11-21)
  * Print command in SystemExec as debug information
  * Sort CLI flags
  * Update imagebuild depdency to support heading ARGs in Dockerfile
  * rootless: do not specify --rootless to the OCI runtime
  * Exclude --force-rm from common bud cli flags
  * run: bind mount /etc/hosts and /etc/resolv.conf if not in a volume
  * rootless: use slirp4netns to setup the network namespace
  * rootless: only discard network configuration names
  * run: only set up /etc/hosts or /etc/resolv.conf with network
  * Handle directories better in bud -f
  * common: support a per-user registries conf file
  * unshare: do not override the configuration
  * common: honor the rootless configuration file
  * unshare: create a new mount namespace
  * unshare: support libpod rootless pkg
  * Allow container storage to manage the SELinux labels
  * imagebuilder.BuildDockerfiles: return the image ID
  * Allow setting --no-pivot default with an env var
  * Add man page and bash completion, for --no-pivot
  * Add the --no-pivot flag to the run command
  * Improve reporting about individual pull failures
  * Fix From As in Dockerfile
  * Sort CLI flags of buildah bud
  * unshare: detect when unprivileged userns are disabled
  * buildah: use the same logic for XDG_RUNTIME_DIR as podman
  * Make sure we log or return every error
  * Correctly set DockerInsecureSkipTLSVerify when pulling images
  * chroot: set up seccomp and capabilities after supplemental groups
  * chroot: fix capabilities list setup and application</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Update to v1.6
  * unshare: do not set USER=root
  * run: ignore EIO when flushing at the end, avoid double log
  * build-using-dockerfile,commit: disable compression by default
  * Make rootless work under no_pivot_root
  * Properly format images JSON output
  * Assume user 0 group 0, if /etc/passwd file in container.
  * Add buildah info command
- Full changelog: https://github.com/containers/buildah/releases/tag/v1.6</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551182400">- Update to v1.7
  * vendor containers/image v1.4
  * Make "images --all" faster
  * Remove quiet option from pull options
  * Support oci layout format</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551441600">- Update to v1.7.1
  * Minor fix to vendor in github.com/containers/image 1.5 version
  * This fixes a crash on pulling of images
- Stop building from specific commit</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
</package>
<package pkgid="40c518be5bf0b49f373e81676ef30da3c0cd81c0e2155cf8f603bef672850219" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="733b95b42af911553cd573fa396d134c98e99c10386843d6201a32640532422b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1358769600">- Executing autoreconf requires autoconf
- Set RPM groups to the common ones we use for library and
  "-devel" packages</changelog>
  <changelog author="idonmez@suse.com" date="1358769601">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="2ce75b1d0edf34d3d84ece14e7f3dfe1fd9462f4be43242af32b658060d76fef" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="deac5254032a164a2bab0ba8a6b0ac5893390c2dfabb3a1354821eefd08a07a5" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="4f1bcd9f3f60aeee521d0c4ef5272d303427f098f26311af1c88276fe43c050b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="idonmez@suse.com" date="1358769600">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="b0966ba15a12f4668dad31b16dad99def66eff270524d360eda6d7a574d1456e" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="a5cfccbd2ca97cd960d151a9d34b836f51465f66800c390e22bc80e6b322a36a" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="8740981b98c69966b589c29b91241ae05025223d0f11e2b0e2858e790e5ced33" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="fcce4a5e74d0a09cbde3bffd1f29b2ef9b19325f8dbf005dc68ff9fcc3b7155d" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="5febd550fe022a481c448052a7894d1213df2a8fefa24342b2da8231e8f25b34" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="efaa72dd646bd816520aa1a07e34d5b0b7d490342fc7344db8db181db0ee9199" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="72426e9242ed9caa0533562f17de3096a7471568bff8b01369274137258acbb4" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="c89597280c3475077f9b46b5592389c289173f037a311c16d861a1cfef0c8828" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.34" rel="lp151.2.3.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="044211c57bfa4b16313a8be4bce4f2722bc3cc776c6a964747bf735d4a096525" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.34" rel="lp151.2.3.1"/>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="84ab9261a26cba62d653620703e013dd791e8bc5eeaaa7e26f5a69d38bc6c481" name="calamares" arch="src">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="911757cced05a0eb9c53e063b04b0377edb2383a31081cd0d218daf571f38012" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="df65bf05eb90bc20ebc41c237561619b9f79c9dc36a0f5707e8cd64c83b60f74" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="70ae6d662f67c944238c334f1016276b264dabecbc829ae51c6eca2b9fcae1b2" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="lp151.4.3.3"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549800000">- use suse_version macro instead of sle_version to make effects
  on openSUSE Tumbleweed.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1564228800">- Update to Calamares 3.2.11:
  - Fix race condition in modules/luksbootkeyfile/main.py
    (bnc#1140256, CVE-2019-13178)
  - more about upstream changes in 3.2 versions can be found in
    https://calamares.io/ and
    https://github.com/calamares/calamares/releases
  - drop 2.4-services.conf.patch
  - update 2.4-bootloader.conf.patch and rename it to
    3.2-bootloader.conf.patch
  - update 3.1.11-packages.conf.patch and rename it to
    3.2-packages.conf.patch
  - update 3.0-settings.conf.patch and rename it to
    3.2-settings.conf.patch
  - update 2.4-removeuser.conf.patch and rename it to
    3.2-removeuser.conf.patch
  - update 3.1.1-welcome.conf.patch and rename it to
    3.2-welcome.conf.patch
  - update 3.1-show.qml.patch and rename it to
    3.2-show.qml.patch
  - Minimum Qt version is Qt 5.7, thus removed support for
    openSUSE Leap 42.x
  - drop 3.1.4-unpackfs.conf.patch that used for openSUSE Leap 42.x</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569844800">- Update to Calamares 3.2.13. More about upstream changes:
  https://calamares.io/calamares-3.2.13-is-out/ and
  https://calamares.io/calamares-3.2.12-is-out/</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1569931200">- Update to Calamares 3.2.14:
  - "locale" module no longer recognizes the legacy GeoIP
    configuration. This has been deprecated since Calamares 3.2.8
    and is now removed.
  - "packagechooser" module can now be custom-labeled in the overall
    progress (left-hand column).
  - "displaymanager" module now recognizes KDE Plasma 5.17.
  - "displaymanager" module now can handle Wayland sessions and can
    detect sessions from their .desktop files.
  - "unpackfs" now has special handling for sourcefs setting ?file?.
- Add "-DBoost_NO_BOOST_CMAKE=ON" option to workaround bug in
  Cmake compatibility with boost &gt;= 1.70 (see bnc#1152377
  https://github.com/calamares/calamares/issues/1242
  https://github.com/calamares/calamares/issues/1251 and
  https://gitlab.kitware.com/cmake/cmake/issues/18865)
- Update 3.1.4-unpackfs.conf_Leap15.patch and rename it to
  3.2.14-unpackfs.conf_Leap15.patch
- Update 3.1.2-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.14-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570449600">- Add upstream patch 3.2-fix-autologin-config-via-sysconfig.patch
  to fix regression while configuring autologin in openSUSE
  (see https://github.com/calamares/calamares/issues/1253).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570795200">- Update to Calamares 3.2.15:
  - "displaymanager" module now treats "sysconfig" as a regular
    entry in the "displaymanagers" list, and the "sysconfigSetup"
    key is used as a shorthand to force only that entry in the
    list.
  - "machineid" module has been re-written in C++ and extended
    with a new configuration key to generate urandom pool data.
  - "unpackfs" now supports a special "sourcefs" value of file
    for copying single files (optionally with renaming) or
    directory trees to the target system.
  - "unpackfs" now support an "exclude" and "excludeFile" setting
    for excluding particular files or patters from unpacking.
- Remove patch 3.2-fix-autologin-config-via-sysconfig.patch
  that included in Calamares 3.2.15 upstream.
- Update 3.2.14-unpackfs.conf_Leap15.patch and rename it to
  3.2.15-unpackfs.conf_Leap15.patch
- Update 3.2.14-configuring_autologin_in_sysconfig.patch and
  rename it to 3.2.15-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570881600">- Update 3.2-packages.conf.patch to try remove "dracut-kiwi-live"
  package after installation.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1570968000">- Launch with "pkexec calamares" in openSUSE Tumbleweed, but
  launch with "xdg-su -c calamares" in openSUSE Leap 15.</changelog>
</package>
<package pkgid="49b84d3769f3e318a8b6fec7b12e3dd879e1e738f069cc0ddda52ade0a09b4b3" name="calamaris" arch="noarch">
  <version epoch="0" ver="2.59" rel="lp151.3.3.1"/>
  <changelog author="tcrhak@suse.cz" date="1026561600">- update to version 2.50</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="tcrhak@suse.cz" date="1045483200">- update to version 2.57</changelog>
  <changelog author="tcrhak@suse.cz" date="1059480000">- update to version 2.58</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="tcrhak@suse.cz" date="1091793600">- update to 2.59</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update download url
- Clenup spec file with spec-cleaner
- Build as noarch</changelog>
  <changelog author="mpluskal@suse.com" date="1529409600">- More spec file modernisations</changelog>
  <changelog author="Kasimir _ &lt;kasimir_@outlook.de&gt;" date="1566820800">- Fix generation of reports with Perl &gt;= 5.12 (boo#1145328)
  + 0001_perl.patch</changelog>
</package>
<package pkgid="a998101ff794c0e29d37a40b1dde3133cd1e75217cec89aaa7ce0d36f7d6b1f8" name="calamaris" arch="src">
  <version epoch="0" ver="2.59" rel="lp151.3.3.1"/>
  <changelog author="grimmer@suse.de" date="930916800">- initial package (Version 2.27)</changelog>
  <changelog author="grimmer@suse.de" date="931176000">- corrected permissions for /usr/bin/calamaris</changelog>
  <changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
  <changelog author="grimmer@suse.de" date="945950400">- new version (2.29)
- specfile cleanups</changelog>
  <changelog author="grimmer@suse.de" date="948456000">- spec file cleanups (added version- and manpath macros)</changelog>
  <changelog author="nadvornik@suse.cz" date="953812800">- added BuildRoot</changelog>
  <changelog author="nadvornik@suse.cz" date="970833600">- fixed Copyright</changelog>
  <changelog author="nadvornik@suse.cz" date="973771200">- renamed calamari -&gt; calamaris
- update to 2.40</changelog>
  <changelog author="adostal@suse.cz" date="996494400">- change gz to bz2</changelog>
  <changelog author="tcrhak@suse.cz" date="1007985600">- update to 2.42</changelog>
  <changelog author="tcrhak@suse.cz" date="1026561600">- update to version 2.50</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="tcrhak@suse.cz" date="1045483200">- update to version 2.57</changelog>
  <changelog author="tcrhak@suse.cz" date="1059480000">- update to version 2.58</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="tcrhak@suse.cz" date="1091793600">- update to 2.59</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update download url
- Clenup spec file with spec-cleaner
- Build as noarch</changelog>
  <changelog author="mpluskal@suse.com" date="1529409600">- More spec file modernisations</changelog>
  <changelog author="Kasimir _ &lt;kasimir_@outlook.de&gt;" date="1566820800">- Fix generation of reports with Perl &gt;= 5.12 (boo#1145328)
  + 0001_perl.patch</changelog>
</package>
<package pkgid="e42662f967b0606a16908e170d9550b935c762513c67212b95d9f1cf617fb58e" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="ef5ee70e630eb20a2010d46d3c265cb763ed21528bd4b1ed182e98d388e5527c" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="dfde874d8f54bcd82003bb74a6e6b8d961ac1538cc667410b559a0533e776fe5" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="9a282d1f72da556fc87fab09ad5cd49298aeba3aecf42d42d35cc8a33c0ba8fd" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="2b72512dd64a93fdcf8263604cee1cfb3c117a13b5428c9cd15ff406ea48d1c0" name="cargo" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="03a20d831f2fd3c12b6d8a819bc6c79377f662f02c9b835889822b5af274d1d3" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="b2c784b680266c38db1ca142368d5a2d21b74871a1437102c154d003fdb43b56" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="0bfaf4f4d02750af5bc0f75299bc25827dd534694511e2217371760e13a05df0" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="5a5170bc447353ad7ee080b825098445dadd85a44bbfcd3c961b960d8e1861fa" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="a363409a7edc7cb5e8abf0039e4b718efa0a511663d731994857bb94adce13bf" name="cdio-utils" arch="src">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
</package>
<package pkgid="9bb0d6bdf5a19faaff90f06c60e4d206ab1ff77978a4532e9cb6f40dad253f11" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
</package>
<package pkgid="baa5e15c1437a713855050c24174ccb709520a9ccf1bb065af1d011f515bd0e4" name="charliecloud" arch="src">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="e9bd11c5025079fbf086ce91f8fd82ea313301ccd9ce47eb24fec75f39dd9097" name="charliecloud" arch="x86_64">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="bfb07149eccc2b50273fb916e368b20c44c030786d2a8f91452dd4238fe89386" name="charliecloud-doc" arch="noarch">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="307062043feece8b113683c2d50fdacea62bca5773eb568c53057c0c8ad39399" name="charliecloud-examples" arch="noarch">
  <version epoch="0" ver="0.11" rel="lp151.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements</changelog>
</package>
<package pkgid="c8569209dbaa3947266acfda85e415a65e98c9174308f5198d8185303e24bc29" name="checkbashisms" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="3af169a970ab74a5e961efda50940340c6737473b2cb924bd611ecf4ee133f89" name="checkmedia" arch="i586">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="754a3b7da50679f9c0e149e1eca86f6ec87691f7d4c9799e2096d2c1766871aa" name="checkmedia" arch="src">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.de" date="1251201600">- fixed tagmedia to use iso size from header</changelog>
  <changelog author="snwint@suse.de" date="1286884800">- don't check the first 512 bytes to avoid problems with isohybrid</changelog>
  <changelog author="snwint@suse.de" date="1310558400">- change isohybrid md5 calculation to report 'real' md5 sum (bnc#678739)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="snwint@suse.de" date="1327492800">- support more digests: md5, sha1, sha224, sha256, sha384, sha512
- changed license to gpl3
- new major version</changelog>
  <changelog author="dvaleev@suse.com" date="1383220800">- make sure WORDS_BIGENDIAN is defined correctly where needed</changelog>
  <changelog author="snwint@suse.de" date="1383652800">- added github url to spec</changelog>
  <changelog author="snwint@suse.de" date="1398859200">- ignore padding area when calculating checksum (bnc#804160)
- 3.2</changelog>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="a5052592b6c1e630c9b7064d655fc1e0cefd4cd5b1aca66aa008eb18cc2fd9c0" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="2c278743a3f84f2413bc82e59d0502f01763310e6751650b84af95850a307b8a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="529d41e52e1fd3cf102a4f6e7954163c6d78e06078c340d5cc7324bc2fd68af0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="15017191ec8a594c636086501c82f2def8105bf1f887e6ae28df5c6cf72a6f68" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="1eff2764caf34aa00836a7e747d94033f19ded603c6e01166cab7f2a9992422c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="b4616e47979870b8f27fd0db93b6e70439870760a59e2b907b81ac4028648624" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="523042c5f7929826c30f7f0f6b51f668cb68bd396fec7e13627f0b3c7ef23b04" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="72f25bc1a80963beb67484d752643928ce872701f6341fe1c79d1abc40c27935" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="bde205d1093480adf909c2b3623da8b8df8ba8b8ef5a46d1ba1506a1a1202dba" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="0b4907142e524501e2a3d1f73b404aafcc059143f684f8f47cdb0b08bb0700d1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="cad1c6f84fb5ab9a7b16b89dd82af5cb79d8ae850dd1f97cd64f3ec3250a3d47" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="f0494a70668e739aae0beeaffe001bb39bb46087d16031c21d756399cbfa1bf7" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3a66b3708aeb31cd8082937a6a9c29a7c61e32981d1564178ffbb5854ce29bfa" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="b32ecc8ef457a23b9a45f51338d176dbf16864e2449afef466a487530ad13e58" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="7eae2099be86b017d23ae5d395bc3bb4e05f540746a88fb1f645657a01159d17" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="b9691c9621d6a535594aa4897ad04fc10cd88f7550cbe8bb6cb68e15773917ef" name="chromium" arch="src">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="3706fe8ecaf00895627d33acdeede6c9bedf4c2118d6341491e0ecdcd9bd293a" name="chromium" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="6122844f17ba0ec7f1d4cfd4344da361ae0f7aed5775ec64dc3ed4f857332df7" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="f3815db0ae78582e14a6452239f3efdc7d1d32c1b51221641e6372b8f2c68329" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="611b90d8304dd0d37cc17fa5c449b3c9eaceb8d7c8234d8ae4ff1e15dfd7802f" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="a464cd9e9a0e9e49bd65fb4fb37143c8eb4af677d532815addd35917eb5d80b2" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="5c5354f61539aea37e5ba9e479d49428c8cb7ac5314b96e45bab9d99785c39a5" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="44bd9470ba236106432b54f6467ef5fb0250c880f905407369b3fbc709c9a06d" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="aa06bffbd53c30b39a4f4be9d66083308bb1e1181bdd1c4f5e43f3beababfa61" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="8b740065319208d32bfeeaa3102c839afbc876a88a8dd27b215c8f416505287e" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp151.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="b4333a324a81700c82d2f208e33637f65c432ad744aadcb5e6a278e25ec8175b" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="80c398e44d9cbdc2103bc5da4cc31198287cc237cce52f7ed2b230c54860e352" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp151.2.25.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="fc74299c765590030dfbcc100a95b55d16f2e2d3a9c491132ba4ef98946ffbae" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="d6a709aed96a3d49c6a1a9983c04d4ae6dbbe959bd8c9168e9fd059807578766" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp151.2.15.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="24f49706d871efd52302cba4738dcdfa42e2f06b06f6022bb2388ff2c940baf4" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="23991c9f3b9e5a6c7b26d5f62441e8262007eb4fd63d537d2bf1938f9a58c3ee" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp151.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5947b29677e529ae4ec2fe8eec3eb3c3c5e3471e4c711ff9f4fca933758fea7f" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="9d79c49120065959b4a221ee437bbb8d67b4390306f7947b5ffe7f9708db1740" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp151.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="3d69221c13dce7260233cae88be16809a0e21062077fc07f829abfa4f5c910e3" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="cee487bc1bd47429b225ee6e3958983dd188b57253e1a6ef53651cd79c5f42b7" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp151.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="544719b57b1a56d09049c09681948a0ac6b022f6d7593163a2f39b9773392a73" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a3ace072c73a9647a4a2eb6d7333c29f9fbdd922c65cc6d7275e6efcfd59de79" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.108" rel="lp151.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574078400">- Fix build on aarch64 with:
  * chromium-79-icu-65.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574251200">- Update to 78.0.3904.108 bsc#1157269:
  * CVE-2019-13723: Use-after-free in Bluetooth
  * CVE-2019-13724: Out-of-bounds access in Bluetooth
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ca6d35bb0439e7bed529529476bfdfffdbe0ebf1ebe78ee8ea4ef2c8fa5fa540" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="3711412e26a21ccfadc5e6c7e59f869e2c8ee0cb289a2bff33ee581dfe13f744" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.70" rel="lp151.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
</package>
<package pkgid="975064018b316826448a13f02d9b9cbdca55b25f69c42b380d644eeaa25f75ca" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="d0087293aa42832e3528e0ed57bba120c5a779d1207f41b7339bc44969154baf" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.87" rel="lp151.2.42.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
</package>
<package pkgid="da90160c17dc49597873561aa88a9a0ba517762fba17313a3e0a9cb1daa160d8" name="chromium" arch="src">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="fdcccd7c9de87e1e0fe7dbf9fcd0a1205bbec117a6cec9a8c85e766757d92f12" name="chromium" arch="x86_64">
  <version epoch="0" ver="78.0.3904.97" rel="lp151.2.45.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1571400000">- Use internal resources for icon and appdata</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 78.0.3904.70 bsc#1154806:
  * CVE-2019-13699: Use-after-free in media
  * CVE-2019-13700: Buffer overrun in Blink
  * CVE-2019-13701: URL spoof in navigation
  * CVE-2019-13702: Privilege elevation in Installer
  * CVE-2019-13703: URL bar spoofing
  * CVE-2019-13704: CSP bypass
  * CVE-2019-13705: Extension permission bypass
  * CVE-2019-13706: Out-of-bounds read in PDFium
  * CVE-2019-13707: File storage disclosure
  * CVE-2019-13708: HTTP authentication spoof
  * CVE-2019-13709: File download protection bypass
  * CVE-2019-13710: File download protection bypass
  * CVE-2019-13711: Cross-context information leak
  * CVE-2019-15903: Buffer overflow in expat
  * CVE-2019-13713: Cross-origin data leak
  * CVE-2019-13714: CSS injection
  * CVE-2019-13715: Address bar spoofing
  * CVE-2019-13716: Service worker state error
  * CVE-2019-13717: Notification obscured
  * CVE-2019-13718: IDN spoof
  * CVE-2019-13719: Notification obscured
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patches:
  * chromium-78-gcc-enum-range.patch
  * chromium-78-gcc-noexcept.patch
  * chromium-78-gcc-std-vector.patch
  * chromium-78-icon.patch
  * chromium-78-include.patch
  * chromium-78-noexcept.patch
  * chromium-78-pm-crash.patch
  * chromium-78-protobuf-export.patch
- Remove patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch
  * chromium-77-system-hb.patch
  * chromium-77.0.3865.120.tar.xz
  * chromium-77.0.3865.75-certificate-transparency.patch
- Rebase patches:
  * chromium-system-icu.patch
  * chromium-unbundle-zlib.patch
  * chromium-vaapi-fix.patch
  * chromium-vaapi.patch
  * old-libva.patch
  At revision 0ad55cb9e188d5926db26003b443eec9.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571918400">- Adjust LDFLAGS settings for LTO to take memory-constraints into
  consideration</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572004800">- Disable LTO for now as it consumes ~20GB of RAM, we will reenable
  the feature later when some memory consumption fixes land in
  GCC</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1572436800">- Enable LTO again with disabled parallel LTO WPA streaming.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update to 78.0.3904.87 bsc#1155643:
  * CVE-2019-13721: Use-after-free in PDFium
  * CVE-2019-13720: Use-after-free in audio</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- Add patch trying to build on SLE12:
  * chromium-old-glibc-noexcept.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868801">- Add more magic for zlib handling for SLE12 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573041600">- Keep just one conditional for vaapi enablement</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573214400">- Update to 78.0.3904.97 boo#1156172:
  * Various security fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="c91bc4e2e2c5b4c3297b302c9db394bb6ce100d1ebd6313b7a247fccbc5464eb" name="clamav" arch="src">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="f71fd772568548e759a52a36da64f5e01073ef1b8f6db15586d0d7e3c1a640a7" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="b88756fdd1b1e171fc09e7d8f42a299b485562c0237d9c40e11e9bdee479e7cb" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="32c0b335ee7d0141be6fef061c64a5aed1d2ff0dd09b3e174b167e093f15316d" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="4d8c06827bdf8c4d59062b134085e5b01cbf93abc40ceada4e24a6e432ad5a89" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="5dfe7f262e1fb9d8dde613ad973b1301b905e031a508308217915387028a5bdf" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="acd31407e45a0c5eb8a1d78aae2d76e76921d08f8361ee63a5dd21ed2fff3972" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="a6084ee0d6c0e129796b5f7433f31bd4cc5fe49c5b031a2c463c090e28921528" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e1e540addb29ec8bd822fe7b5b6419423f6bc8f47b9d338d91c1d08f435ff0f5" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="842697232f5d223c3b683953b9937f609b9adb3342bcef02ceb00816614a0967" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="b0e00424b7a81e13ebe2f48c675ad9c9398c36a43184517c17e84f74447155da" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="2faf401b41c174b063a5ec2c81bf95a44628cbe61a00ea9235424e424dd8f26c" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="090fd9741b5ac3ba625dcf5124164e7e28dfbcee8aa46b5caff9040bdb5707c4" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="e67ae10a52f3fdf4e9acc8cc8780400af4fea561355e733a3c8c2fb9e626bd79" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="00015420c6c7997ed24cc98ccb3ed2d315af2f0b4ee9b6f898e4377b9ff0a978" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="58d8065153f5f1f58aaee4fec0050261a22025eb992b581b4f97d530ec6849f5" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="08ea885f9c06b6acc6b7f28808fa47a0982db104df325e4993f1ae384675acf4" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="fb0bc0233ca37f5bb3a6acb8ced151649cfc4700ba3148a5ec66d0c4dc68ad60" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1382011200">- Update to 1.2.0:
  * Add support for indexing and playing music from Box, Dropbox, Skydrive,
    and Ubuntu One.
  * Add support for Subsonic.
  * Remote control support for Android.
  * Add a Playlist tab to the sidebar.  Starred playlists are saved in here
    when their tabs are closed.
  * Add configurable blur &amp; opacity to album art when used as a playlist
    background.
  * Support Opus where available.
  * Support .mka and .oga file extensions.
  * Parsing support for WPL playlists.
  * Sort providers by user preference.
  * Add year and bitrate to MPRIS2 messages.
  * Add "not equals" operator to fields in the smart playlist wizard.
  * Add an option to write ratings, play count and scores to files.
  * Add options to show the rating and score on the OSD.
  * Add support for POPM tags.
  * Add support for FMPS tags in Ogg, FLAC, MP4 and ASF files.
  * Compile the bundled Taglib with ASF, MP4 and Opus support.
  * Make it possible to cancel cover searches.
  * Add an option to resume playback on startup.
  * Add support for Performer and Grouping tags.
  * Add Radio GFM.
  * Add an Apply button to the settings dialog.
  * Make it possible to mark all episodes of a podcast as new/listened.
  * Add an option for fading in/out on pause/unpause.
  * Add stereo balance slider to the equalizer.
  * Add a --restart-or-previous commandline flag.
  * Allow files to be transcoded directly from the playlist.
  * Export downloaded album covers
  * Removed iDevice support - it doesn't work well with modern devices and
    libgpod isn't being updated to support them.
  * Many bugfixes
- Drop sites.js and ultimate_providers.xml: fixed upstream.
- Drop clementine-nowerror.patch: fixes upstream.
- Drop Add-a-setting-for-disabling-moodbar-generation.patch: fixed upstream.
- Drop clementine-libimobiledevice-fix.patch: iDevice support dropped upstream</changelog>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="d792489900d14ef1c8dfce3842dfcbb1be822a67200e1f21ee33f81be8d9ce93" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="bc2c282b382bf14db2944e008755c1c6011d71579eb6538baa738053ed74e7c5" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp151.3.6.1"/>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="7b72a0aa2a304c0c989711f1f359531d2828cd8422560ccbb84bf075548c2f24" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp151.3.6.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="2196105e230b4017d3685f1b5654c0883ed6c45956669a7f7e4bfeb077b173f4" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="8b30ee2009513cf41a43d31b06779106494db94e6d54e381a64e888ef6f0cd2d" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="acbd2b7c7333083db920afb5ceb353005d5fed9f69a756224f623298a1c0971e" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="f1bdcb817fa3cc54ca61187ab8aaf93df7a22dae6781c9d38268c0c331aa3b80" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.4.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="4f03252da78ba334fac6d1cec844a5e1f33703bfd9d34959cbd86a8351439b83" name="clippy" arch="i586">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="b2f28f96db82f849e074b3ab647f3e64549fd42351fe8b757ac6eb275efda9ee" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp151.5.8.1"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="d329803ab5ce578013ae5baa64e08416d329a0fb45e7cc3ad9c9c17c7dac6202" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="80cdd9c0f86a8dbe1cf8292296afa2dd2d53ff88ea4a2e56e20d20c68ef762f2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="6a0fa7b689b7ab729e66bc9ec4dbf69951ad4e0aeb43656c4d5f6e90cca8c447" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="6dfd283a64c3db078b3442033f175cee861d83d82aaf86d1b72a5d7c06d32a60" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="e007de88b51bdab72566d1ccfc09c2be42a5616516eb86e6010334a5b8ac6428" name="cloud-init" arch="src">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="645ed453c9536c36e78b38d98895e748cb1895c135eb65cb9d0a7afb65348a28" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="42a4b97595729d8a3bf26db914550b49f5cea71a32c78efa5618015fdca5409e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="db847c79f4d96072eac8cec10097870373f62eb3609503304840be007359c84c" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="d61bd20bcd2fb4902b60f2a894dde00c9d5190a245cab9dda5ae817806383b4e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="93442ec88ca9544dff4bcdb1261269a1941866663f54ba71b8f67331340740e4" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="a9f41d079d00799f40929bcfc6de5c66193b42636583cbbbbe3c9d137df5cdcb" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="80837a0a7de59a2c6592d9525da548af970cfe55fcc1c0b9f0805babb85b274d" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.2" rel="lp151.2.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440, bsc#1129124)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
    CVE-2019-0816
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
</package>
<package pkgid="a782a045acb13f18838eb96ecf44b15f6bc2d58089c85d09c19fce1390f2186a" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="eac61276902f19814a3e58609223b99f569d3dad4d4a30ff07c69b90c03b987e" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="1864164f690773a89c17a264ffacd8b754d7e18b549acaee6400e17991010a93" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="42c85594e7bd9781b7b23ca1635d896b0789db4e264bdaf9ea236cd0ce2b9838" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="8b22f3e80ed123b1e78c734e7ee3b25839b52773004a28eade06ead2b7e4718f" name="clustduct" arch="src">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="dc36e02592d3c94396e704206fd0c0a463a5f85375165943813dc01a3eba63e5" name="clustduct" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="23f88970004f9eb33b660179f49c12177dd747572e86f36a905b2f674ad24ea6" name="cluster-glue" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="ec63291be34f5083a2ec10f815e17ac61c582c23b68fe46ff65da7f712a880e4" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="5a03b3e4d0324d8726cfc7ca846dafc292b3d546a65a5c31ce894216470122dd" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="df6904c2c00fae72a87a524041d8363ce3d367a49c8a1f9e723f64cbd0d744fe" name="command-not-found" arch="noarch">
  <version epoch="0" ver="0.2.2+20190613.e6c2668" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1443182400">- Update to version 0.1.0+20150925:
  + Update translations based on https://svn.opensuse.org/svn/opensuse-i18n/trunk/lcn/ - REV 92845
    (boo#906691).
- Change to source service (disabled), checking out from git.</changelog>
  <changelog author="dimstar@opensuse.org" date="1445601600">- Update to version 0.1.0+20151023:
  + adapt to Dataiterator changes in libsolv-0.6.0 (boo#951977)
  + Updated translations.</changelog>
  <changelog author="tchvatal@suse.com" date="1464609600">- Cleanup a bit to have the spec readable and point to proper url</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1464609601">- Update to version 0.1.0+20160523.472154b:
  * Translated using Weblate (German)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Norwegian Nynorsk)
  * Translated using Weblate (German)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (French)
  * Translated using Weblate (Korean)
  * Translated using Weblate (Swedish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498737600">- Update to version 0.1.1+20170629.b80f023:
  * update translations using Weblate (Swedish, Chinese, French, Greek, Polish,
    Indonesian, Persian, Italian, Bulgarian, Lithuanian, Danish, Spanish)
  * zsh: avoid cnf being triggered on every false result
  * zsh: improve handler hooking
  * zsh: expect command to be quoted
  * zsh: define function with two names
  * detect if we have no repos configured (bsc#1037101)
  * call zypper refresh when solv file missing (bsc#1037101)
  * Version 0.1.1</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1498824000">- Update to version 0.1.1+20170630.f55550e:
  * drop outdated DBs</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1514980800">- Update to version 0.1.1+20180103.0595254:
  * allow for multiple repos to be in one .repo file
  * Parse repo files for repo name (boo#980393)
  * Updated translations (Spanish, Norwegian Nynorsk)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1534161600">- Initial Python3 support (bsc#1077238)
- Update to version 0.2.1+20180813.59519f8:
  * scout-cmd: convert dict keys into a list
  * scout-cmd: __iter__ is part of a string
  * scout-cmd: KeyboardInterrupt lives out of a module
  * scout: migrate bin to Python3
  * Do not interpolate SQL strings
  * Use system Python 3 interpreter
  * scount-cmd: Initial support for Python 3
  * data-gen: Initial support to Python 3
  * tests: Initial support for Python 3
  * cnf: initial port to Python 3
  * Move setup.py to distutils and fix package_data
  * Add setup.py
  * Replace multiple unclear "zypper refresh" error messages with a helpful warning
  * Fix lookup of solv-file path for repos with '/' in name (bsc#1037101)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Galician)
  * Translated using Weblate (Galician)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Korean)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1537358400">- Update to version 0.2.1+20180914.017a078:
  * Avoid running command-not-found with python2 (boo#1108565)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1538654400">- Update to version 0.2.1+20181004.20a0aae:
  * Unicode versions of gettext are not for Python 3
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Clean empty strings in untranslated po files.
  * Update po files.
  * Mark translatable strings
  * Delete temporary files
  * Get the make_trans script to work</changelog>
  <changelog author="bwiedemann@suse.com" date="1560427200">- Update to version 0.2.2+20190613.e6c2668:
  * Bump version to 0.2.2
  * Fix bug where sbin packages would print as bytes strings (boo#1135598)
  * Newly generated po files (new line numbers).
  * The make_trans script did not work, because strings were not marked because of eval
  * Fix bash i18n support. The translations are expanded during definition of the function, when LANG is not yet set. Use eval to postpone it.
  * Fix i18n support.
  * Updated translations</changelog>
</package>
<package pkgid="97cffc7783791e2f86fcc3d739fac10fa95c77f27156e140b597a8cd98b65213" name="containerd" arch="src">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="cf97629c6b772422027b3b588477290b597059182cb4c5b888e3928d02c265dc" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="d2e8ff960cf55d163acb0cd656ab8033969482524c138590e796310ae3b0f4b6" name="containerd" arch="src">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="2928d11a0cc778238d049bce7b996f4247652a35bda36c5a4ae8a5135bad28aa" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="69ee8199e5749873d25a80eb6dd4e993b9b370d000a568cd2cb8984f48cf2235" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="799d59079891cfd5912137f9c8ae47fe4691c0efeb1c184a8bc461673e12cccd" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="c328c70eccbcce4f605270030366b7c1ef48b9008c1ed2a341076d98fcfc7408" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="37e95925e77f400d3c93b2b9c49f962d67ef71fdd678b489a28d7838d95e09bd" name="cpio" arch="i586">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="60a5d3837da4331ae71b419cca7b342b5b1840b6abedf64f7bc0f777eddcba99" name="cpio" arch="src">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
  <changelog author="vcizek@suse.com" date="1405598400">- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406635200">- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1408622400">- drop cpio-dir_perm.patch
  * no longer needed since 2.11
  * it was dropped from Fedora too and only caused problems (bnc#889138)</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification (cpio does not compress
  on its own per se)
- Remove redundant %clean section</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="8bf1be2ae8984dfcb3cab4b50e17feb9e5b3df63464af26f4954459e66a34742" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="1d0733e5cbcf27691c87c0074ad9e6034433c880e2ec96ce20ba9551c5ec0f10" name="cpio-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="159282a64d2931cf83acc4301127a44c0ffa9eec5c2ae33956d5f78b31e8bf08" name="cpio-mt" arch="i586">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="9c95ea4debc61c9607b4e6575b5a62276060e0a66ce5080e7d7607898f077e54" name="cpio-mt" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp151.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
</package>
<package pkgid="fb4f544fb0f8573637d0ed3d308827391e54d23d0bca285497ea4f63208a6667" name="cpp7" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="fadf910843985857ab638b446c17e6275e95d6581fbbfcb3b5224f3b57f4dd29" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="18f07043e1ce4952927f241e63732c4789f7f24254ae62f4750ad1fca58c29a0" name="cpp7" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ca8c493798540f9caf4a293a90a46e3f8601e1d8493751ee3b3d16c3ef524c1a" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="020fe96f914ea1190e990374a9af279505974d44dfef02778ae0171957c61830" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="ed1effbcdef77d20a1b1b9edb7b7422e12511e42f684ce941628559a10aa0deb" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="37a0cacb3c673cfa6e37bffc79e30d5f602bb496fe026625c20e47194512a3e6" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="73a0ac4fd9de897edd5618849b9d39e46f07b2633840feaa6055db20778b805f" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="8dc041421ef6c931dd052308bf1942159f20d7336f8e309d412719ac163c6020" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="5f773266f1c481730433b5b40d9f58432e2a61aa85e4e50b7e2fc95d150ba7e9" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="a39d4c8b9d8a41459c760f048a59cb8bef5ecc570867342f6653da53710b6222" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="f35bfba6602861fdcc9ed4d7029a39ad16c2a6a3038a7e7f679cf7cb9783f037" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1569593061.35f57072" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.0.0+git.1543873923.0f9166fd:
  * medium: cibverify: Increase log level for verification (bsc#1116559)</changelog>
  <changelog author="+0800 - XLiang@suse.com" date="1548849600">- Fix: bootstrap: bsc#1123028 remove single quotation marks in scp command
  * Add 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch</changelog>
  <changelog author="XLiang@suse.com" date="1553601600">- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,bsc#1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)
  * low: bootstrap: remove patch 0001-Fix-bootstrap-bsc-1123028-remove-single-quotation-ma.patch, because this bug is caused by openssh</changelog>
  <changelog author="root &lt;XLiang@suse.com&gt;" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
  <changelog author="XLiang@suse.com" date="1571313600">- Update to version 4.1.0+git.1569593061.35f57072:
  * Fix: utils: fix logic for process non comments line(bsc#1145823)
  * High: cibconfig: Correctly sanitize the original CIB as patch base (bsc#1127716, bsc#1138405)
  * Revert "high: cibconfig: Use correct CIB as patch base (bsc#1127716)"
  * Partially revert "medium: cibconfig: Sanitize CIB for patching (bsc#1127716)"
  * dev: Update changelog from 3.0.0 to 4.1.0
  * Fix: utils: issue in to_ascii (bsc#1138115)
  * Fix: bootstrap: bindnetaddr should accept both network and specific IP(bsc#1135585, bsc#1135586)
  * Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * medium: ui_node: Check corosync state before clearstate (bsc#1129702)
  * fix: hb_report: handle UnicodeDecodeError(bsc#1130715)   * setting error='replace' to replace invalid utf-8 characters   * try to catch UnicodeDecodeError and print traceback
  * medium: cibconfig: Sanitize CIB for patching (bsc#1127716)
  * high: cibconfig: Use correct CIB as patch base (bsc#1127716)
  * medium: parse: Detect and error on illegal ordering of op attributes (bsc#1129210)
  * medium: utils: Handle sysconfig values containing = (bsc#1129317)
  * low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1146922)
- Drop merged patches:
  * Remove 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
  * Remove 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
  * Remove 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
  * Remove 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch</changelog>
</package>
<package pkgid="bf9d14bacb6d481c438c45bf72c4ae19de04cef8cf6daff7019b60ab4b957478" name="cron" arch="i586">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="9982078868e91f0dfc2ece22908b57c31ccfce567c6926df53662860e8b580c8" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="d8448b11e07acb6618e6cffc3766f256c6bfe315092b2d1cf07d10680e2012e9" name="cronie" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="2bffb0a795bc44e64a99bdfc3a526daebe603c06815d0f692b38aec24c5adba9" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="7185dfa1f4af0f063108eacd3b342a3029858d7ee4b4b8fb2377e39ab4626009" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="5cca7527fcbc2f401552912dce6eca3776d9da84d251305791b01c985eb1a17b" name="cronie-anacron" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="fa8b484830d6282a7cc98e15a19c5d9d6b7005fecb36afd1e10197255bde7ddb" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="9c0e62856a834e11f0d53e4039eec957deca2f20c7d8f1306c05eaad21a03754" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="fc7994d766eb99f74ccb332d32f0400fcd501cc07b51d4fbb72acd1df2fc1363" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="3dde7433d41c878091b83ee99b8bbf2db735e4e270018bf5d322d12563fb1026" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="a6334f1a911806bacb57141e25704f6933728740c1589d264080a941232166dd" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="0f32c4def1c03f32ad32aecfb6a3644bd1d19a1ebbc052fa60b4facb528f25f4" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="4685018fbab09085d63caac59baf86f7457d24828921fe3499eebb29a9d41640" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="f1c6131e344a35384e19469f500cfbca2c76aa343d774586955e892c85d6c0b1" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="859ef38970b27644d45a17d2eb97ce81f05af9fda71a8dbc2d62ea64d8387deb" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="c8a1ff1c6f6dd1026eaab887e8480b27faa8676ee4244eb9936490a975544fe4" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="834f09bda14727e30bd40d0fcc977d0066bff0c0912a800effd9efc547a41a60" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="8b333e7963cfbc328c0f9e751ae05ce12c463a8632d7bf1354bccb619a011b4f" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="e905bf916a2ddf7eb20e40163b8ff5ee9071f4563678db11110786540870250c" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="76ec1beab11ee4623a9288aaaff8e4d135a38ed8993876409fe52069e982953c" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="4f9314af867cb70be18ffe8e5413400320e8fa3d539a83a0290f85f83c5e2e13" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="eb5e1f84bef3ba27a55f821deae90c98f396584de8cae2b25c72ea610f4d402c" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b3e88c4f8b685a7634019be18a93d4224eb9e5e216c939cce272d877849f024d" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="20a09a5ffd948caf07062434bc1671aadafe00e9612f444ba769795176dd765d" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ea54c93e5096eb4205e414c97c003dfa8eaea524223d7a14218d6d8e38f27002" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="61de1c7b09ba08a5b18895a17317f0288806bd8fe42ac8d88a8a8bc69695ed1c" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b01a04e2ddaf9789351ddd98537b8c031bd61307d26dccda85a9b64815b197bb" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="e42f014040d14a79166feec6469b8d78e9f336bd496f20137e5d3392aca04f59" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="5f01d20389f464debf48b044209fdefc1b5b7c39c1a25fe63330d81ab5f04436" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="079c114206bc9f7eb8ff99ceb71ce23da8912440822e8117f97b479cc432020a" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="f342d4e2a92e595d9dbe73b412a8c781f84f17e18a45422597bbbb1eb6a08e6b" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="1f3ec4c837892d8dd62c0f51eaeb061765f31254efd7c658ea2db98cd7ef35a4" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="bc6e5535ea0aaab9860e59f44b73f4c7a97961bb311356a7fcb16f13155c6344" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="979c08830e5ef0f23253ac80845845f0b136f1702bb540f63bccfef340ef16a8" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="a4b9830ddada6e51cfad005235da4779696f76407e0acb22545f562173bdf22a" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="f8843a94d1bdcba2d116b53feb0bf3fba4b2df3bf3a190fd7d8997f9e1b861c9" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ab227f72972e2b7722e7caf1e635a52dfe0d0443bd720113e964fd129b12afec" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="ade52742b791ae2844d8172e02f4be93938b061bd942969f21aba2fbce35ffc6" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="293a685eb9da026681ad1476796fb7a427a7f3194da3200b2e292fbf466deaa8" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="f7108fd41725b0380641d419878aa1d91142d1fd271b8c528d347623be01ca1b" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="b43dee886f969013d163565c596a500e7495440ef61d199d799f95b51df2b9a2" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="97f1af5730afe145769a986cd48876efda7fa0d3277c3072ca4422ee4739a7a9" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="31b7c10da5880896820ee5f4dcd2f1f2b68e760d555a87a7b00d69a16a06084b" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="1583981cb02a9ec93e64507a1335aad9761d01fb3b88ce81436c7e0db8751530" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="dd21141fa1f96ca5554b44b7a402a3bd4860f77c2872a54a978ef0866336d0c0" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="018d118c43650829c385d6269eb00ff2f48559427d300393245dc8c90fa51f48" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="7b2f627e2dc8a5764ed162106cadc2f439fe53fe1229d1c79ffab17e77f7a245" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.32" rel="lp151.3.3.1"/>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110
- Removes binutils-fix-pr21964.diff as it's included in 2.31.
  Rebase testsuite.diff and aarch64-common-pagesize.patch .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1543320000">- Add handle-ELF-compressed-header-alignment-correctly-by-.patch:
  PR23919.</changelog>
  <changelog author="matz@suse.com" date="1544097600">- Fix the fix for PR23919 [bsc#1118644]:
  rename handle-ELF-compressed-header-alignment-correctly-by-.patch
  to fix-pr23919-1.diff and add fix-pr23919-2.diff
  and fix-pr23919-3.diff .</changelog>
  <changelog author="matz@suse.com" date="1548331200">- Add s390-relro.diff to improve relro support on s390
  [fate#326356]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549281600">- Update to binutils 2.32:
  * The binutils now support for the C-SKY processor series.
  * The x86 assembler now supports a -mvexwig=[0|1] option to control
    encoding of VEX.W-ignored (WIG) VEX instructions.
    It also has a new -mx86-used-note=[yes|no] option to generate (or
    not) x86 GNU property notes.
  * The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
    the Loongson EXTensions (EXT) instructions, the Loongson Content
    Address Memory (CAM) ASE and the Loongson MultiMedia extensions
    Instructions (MMI) ASE.
  * The addr2line, c++filt, nm and objdump tools now have a default
    limit on the maximum amount of recursion that is allowed whilst
    demangling strings.  This limit can be disabled if necessary.
  * Objdump's --disassemble option can now take a parameter,
    specifying the starting symbol for disassembly.  Disassembly will
    continue from this symbol up to the next symbol or the end of the
    function.
  * The BFD linker will now report property change in linker map file
    when merging GNU properties.
  * The BFD linker's -t option now doesn't report members within
    archives, unless -t is given twice.  This makes it more useful
    when generating a list of files that should be packaged for a
    linker bug report.
  * The GOLD linker has improved warning messages for relocations that
    refer to discarded sections.
- Remove binutils-2.31-branch.diff.gz, fix-pr23919-1.diff,
  fix-pr23919-2.diff, fix-pr23919-3.diff,
  gold-depend-on-opcodes.diff and s390-relro.diff.
- Refresh binutils-skip-rpaths.patch, s390-biarch.diff, cross-avr-size.patch
  and binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1549368000">- Add disk and RAM (for ppc, ppc64 and ppc64le) constraint with _constraints.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1550577600">- Add binutils.keyring and verify signature.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- riscv-abi-check.patch: Don't check ABI flags if no code section</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Add rx-gas-padding-pr24464.patch: fix for PR24464.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232).</changelog>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
</package>
<package pkgid="87a99b33f8af71fb2e650ed6c5a98f7a507ea2c4d26c5644199c5d87b6c37aac" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ebd38576b35fc86277e9305e34ba220e85d882f7319679e10b1f4ba0981d6cf6" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0751645dfbf29141751f812b4a16afe9656b970e17fedc07d02156cd4abf7d07" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="88e96230aa7d1c142661b0ef32df1203cc6f3704474c010b7045e76d928c4d40" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="5fd10191ac8b02c6b453b057941310112d667e384e37fd8760abeeadd42e6be9" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="0284870f9299adb9491bbf25e689c486ce3ccd4a1592bd4bb0c871047f03d2a1" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="177d365f2a67ef5d4610806335906e9e161ea05c1e3b83e09c48dad39e339106" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0dd2bc87c7fcf7532dc1d5c3d80e60dfee6b34eb04e608a1be02208713d29b33" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3456a44c6bae9667b7f0f7b4e3e2b66aa658f98019af1312fefb4d8121c89bbc" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="aadfa561e7a8d51f7bded29b153c4f445c038e7d1b56df659cd8428fee048e85" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="259daeba019eb4e1a23b41e08983cd7c69bb91d0093be61445ce923668f41c37" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b55b8bb9ec0ad423e528096766b825da41b34b8461ab58eb3caccc0016298d39" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b8a34574acaef3e6020dfd25b1aae59ae2c40372536ecda98b04b6c124ef9fe1" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6a961fac3e2ed0fab59f69bccf186af6da85d8b10bc14b646803ea093a988ff9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4b7b06edc7adf70c9e5c8bd63d84af03ed187fd45540d1d4bbc469cf4dfde2aa" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="4864120c164d46122c30e279686a9e0105b3eed00ed460f807739248585effd6" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="7cacee8b42f524f045637d67eeaa8d9e6109e3b3c476f3910b6ccc5bd0c51a83" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="24e0e8d7f6e8e05f3cb1e17ab4d7987635cad7312a719b2112d79b3df9432797" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="9de1709204dcc9e6314411bba55557b250f3e4d34fc2e9d45118f712b4c0aa37" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="3b4cecb57972236f0b49d2649fc06e4203d64d17638831467f50f07b0fa45e66" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="d583fa0d2d4ceb9a588413d09b3457b2cc0f8d5df2e56923463f66eefd4d91a2" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="778e0ce2f6ace5028b7812e9618f4ad9fb313b515c749b74ffbf9099799d76f8" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="0cc58336e71a4d22abe3e46a0b83f201fe33b1b758e5447ff9180b33b5474f79" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="a8d9b146177413ea2f251ec6fe3063205848b355e3db47e38bd16c4313ff7fb5" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="57527d011a212ebfa84e32b59709109cb26d716bcba200b9007775ac382441a1" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="acbfb5ac6f1b15dd015d6d93ec9680e0fbcf0023616eca9478cd1c5adaf08ee3" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="efb263d2f48ead4a6e3ea94f3dabb46b92424eb4d84604ec016bac4ae12b26a7" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="5f113de91038391ee8636cd32b9d27a556bcf748674150cf6cfc6e7116abd726" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="3baa308c38040b807a81d615e937b4b1124115228527e48ed26012b7357e2592" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="0633c3cf46a13bffc7ae087a2a00596cb83948186c7fee88f331536f7ae32179" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="f98ddf7a84349957db7ad1f6e8670bba7771e48cdffb56c7a62899c16f87106a" name="cups-filters" arch="src">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="387eebc9b4af49a71468a2281a4ed2f9f906f40e0876b2e84073edd62247f496" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="962a01ddd306bf4af4fdc8031865049e14809b6be950ab8894afae87d7254fe2" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="39b4c467b61698857184d12a66d54c60bd5e9706d3dee66e635e9345299e4675" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="634a7ecc11ef881cef8bac6c58b7ad14a407067eba009534f06747cd867ed2fd" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="498924273d017f88c0016a800f5738d3ee0d5e626900cefbae31caa222435d52" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="5d4fedb6e2b34434fa70a4343e001d1b6ae9144bfa8ff7d0d2a6e46b3ef6a2eb" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="cd40ab3ec869d1ab5d8caf476fb3b5bf1c246ca5fadbc06100a1c387e98578f1" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="9b569c455cb5edb23ffa811ad09f8e655e468d5c387883c350e57ed772af2278" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="76e7840a077dca68ac868c2c7ce0d225f0aa512f75ddbf98c04b3ceeddb6e5ce" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="4019ea99e80c2f9d7152a42a20480b85ea87fc2a272d1ad8d8163298429a09b2" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="a44348fc6afc14f94446262ed40d0b76d992ef579913f7ee69fc9575a4ecc7ca" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="e522d9bdf4c4441bf2f760d51cf50e81993562bdd582c32e9a897e0d96c946e6" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="15e7a1ebecb2ce206c5163626aa743f023cec7225c78f0512f24724bc214f9e8" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="6eeada104fcb870309636a25c45126f7c0ee21f522632d3a064ff2cc4ac2a192" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="d0431cfc41743b7d98f198876b5971d83126cefae40213e6c18646d4b497d6e2" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="5ed9060b09ffc25a99abf8ed0eafe95de005a6f5e4c821132b6c5e2e30a5e931" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="d328768d8533279728c7d30f4029c08e065af4ddc806b778fb329f03211c6705" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="ecc4b1ecc7657128d90e1ffd12fed03ed3baa20857750b7724647060f4123142" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="86535ecfbc8ba8793e574aa93845dc6d888ba98a3442ceeb0df887b853aea8f2" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="7160d4a6b5fe9bcadb35589d8dada094c8e12960d5b5c1a284ee25d96a360110" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="b1468143ba8daca187107bdff98905e7add143e012954045e8e88eff07fa25a5" name="darktable" arch="src">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="65c3220beef20f048151a8075de3c063da4d50183cd5fbfc9e0c6abfa416820a" name="darktable" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="f8026d6579a55014dc12f84326956df19dbe355005a4cd85c5ed182ead58fd23" name="darktable-doc" arch="noarch">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="ea01aeb061374a3e14f85fb6fbcba27589ab09846069be0c631f34c478bb104c" name="darktable-tools-basecurve" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="a2483a33488f09eb43e946fae9536e051b2a8df0ed84afd57aef795607cc6f33" name="darktable-tools-noise" arch="x86_64">
  <version epoch="0" ver="2.6.3" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548331200">- Remove idempotent %if..%endif guards around %package
- Replace make install and make use of %make_install in its stead.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563192000">- Fix compilation failure due to stricter OpenMP 4.0 handling in GCC 9,
  add Fix-OpenMP-4_0-issues-with-GCC9.patch
- Fix build with exiv2 &gt;= 0.27, add
  0001-Fix-build-with-exiv2-0.27.patch
- Remove obsolete (since 2.2.0) SDL BuildRequires
- Specify minimum versions for GTK3 (3.14), glib (2.40) and
  exiv2 (0.24) in BuildRequires, matching upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571659200">- update to 2.6.3
  - New Features
  - April 1st game is now disabled by default
  - Add preference to disable/enable April 1st game
  - Print module default margin set 17mm
  - Add support for disabling base-curve by default
  - Add support for disabling sharpen by default
  - Bugfixes
  - Source with OpenMP can be compiled with GCC-9 and clang
  - Update skin tone preset on color-zones module
  - Fix compiling with exiv 0.27.2.1
  - Fix file access permissions on macOS Catalina 10.15
  - Fix shift+scroll only scrolling in one direction on macOS
  - Fix picasa, piwigo and facebook SSL support
  - Fix CSS issue on MacOS
  - Base Support
  - Epson R-D1s
  - Epson R-D1x
  - Fujifilm FinePix F770EXR
  - Fujifilm X-T30 (compressed)
  - Fujifilm XF10
  - Kodak EasyShare Z981
  - Kodak EasyShare Z990
  - Leica C (Typ 112) (4:3)
  - Leica CL (dng)
  - Leica Q (Typ 116) (dng)
  - Leica Q2 (dng)
  - Leica SL (Typ 601) (dng)
  - Leica V-LUX (Typ 114) (3:2, 4:3, 16:9, 1:1)
  - Olympus E-M1X
  - Olympus TG-6
  - Panasonic DC-G90 (4:3)
  - Panasonic DC-G91 (4:3)
  - Panasonic DC-G95 (4:3)
  - Panasonic DC-G99 (4:3)
  - Panasonic DC-ZS200 (3:2)
  - Panasonic DMC-TX1 (3:2)
  - Sony DSC-RX0M2
  - Sony ILCE-6400
  - Sony ILCE-7RM4
  - White Balance Presets
  - Panasonic DC-LX100M2
  - Noise Profiles
  - Panasonic DC-LX100M2
- drop upstream patches
  Fix-OpenMP-4_0-issues-with-GCC9.patch</changelog>
</package>
<package pkgid="168288d5a5763eb1a5846b15b53c2f677395c829bbad5647668492be0b0f75dc" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="a6381ab65fa52446029142c36058d4b65d7a1ce2713a63fd9965d53be6423a17" name="db48-utils" arch="i586">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="b1ac5399e80ef5ee4d2a3a59c01ecc949a8795c2c97099c60a67648dbcae538f" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="2bf268d5972b8c629f301cb574af4b3bce31ff53fe432d5155c685c9fa982ac4" name="dbus-1" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="2508ba7bf0b1cc4b74a847be12b96684f601748bd15b50fc50850f59d798fb2a" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="d59e3bf816e45ae8205cc6f164d71328669b9f47a0af50c3d49a63a35de6dcda" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f9c5eec297b4aee4db48d3eb28264db078cd8a78cc6b7e3a9a7940d00963e8f2" name="dbus-1-devel" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="68cf212ca542a631deb5b562761f3f9bd6f404663438b6b76940ebf35ce61eb8" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="4b7fac95d79e0b7f80dcac9e9f09d87597aae0a5f837ac1228f6fafb97f427d0" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="485b04a82f537acb9b8038d5094fe89f5f0b804138bed4d2e6846db0023ef0cb" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="e0c06500bffd2995d83a8152094d5c8b35ba24a043d280a76c828d7e362e3e4c" name="dbus-1-x11" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f40206f2853337ec2e9a3e031ca5608f46e35e9b9cc820765735e275024c5cd6" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="65b94bf4dee8d32d2683505492d9a5f153693a410a719d30fe0c69e2bf088c1c" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="a65b8eb8e696bc3680f7e186094cbbc4de8960803ab921027221667a915d4d9f" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="3f1706509bba354f8ac8d17b7835c87d1f8483c81c73f14e364d8419ca0e4547" name="dehydrated" arch="src">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="d73d4c9a1e45344668e477ed6362ebb43cebad0a2ec7289a1a42a43b5c3b3608" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="10c9bb0ee8f301c68221cf1abba0206abf7be3419a67c94b4ed6eff1eb76081b" name="dehydrated-lighttpd" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="d4d5fe5826eb45eafb01ed2222f02de9d5b87591a24fbcd8b76238f087911b12" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp151.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="6189c796710c79e38784a682abfe0e422870787ce9159f59cb1ee4cab229af68" name="desktop-file-utils" arch="i586">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="51162676c7d9487786bb9610510e43f953d4c9b8f90a83cf549cf1c79d63a7d6" name="desktop-file-utils" arch="src">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1331035200">- Update to version 0.20:
  + desktop-file-install:
  - fix list of locale strings without trailing slash
  + desktop-file-validate:
  - add MATE and Razor to list of registered environments
  - validate Desktop Actions
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1348660800">- BuildIgnore dbus-1-x11 to break the cycle</changelog>
  <changelog author="vuntz@opensuse.org" date="1349092800">- Import SuSEconfig script from glib2 here:
  + This is needed as SuSEconfig is now dead, and we need a way to
    generate the defaults.list file needed for the default MIME
    associations. Part of bnc#782120.
  + Add suse-update-mime-defaults as source, and install it.
  + Call suse-update-mime-defaults in %post.
  + Call suse-update-mime-defaults from the %desktop_database_post
    and %desktop_database_postun macros defined in
    macros.desktop-file-utils. This way, packages using those
    macros will regenerate the defaults.list files on
    install/removal.</changelog>
  <changelog author="vuntz@opensuse.org" date="1349956800">- Update to verison 0.21:
  + desktop-file-validate:
  - update to current version of menu specification:
    . only print hint if no main category is present, not an
    error
    . make Science a main category
    . add new registered categories: Adult, Feed, Humanities,
    Maps, Shooter, Spirituality, XFCE
    . update related categories
    . add TDE to list of registered OnlyShowIn
  - accept and validate GNOME3/GSettings for AutostartCondition
  - output hint if more than one main category is present
  - output hint about suggested related categories
  + misc:
  - do not require glib &gt;= 2.28 for build</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377864000">- Update to version 0.22:
  + desktop-file-validate
  - add DBusActivatable key to allowed keys
  - warn about OnlyShowIn in Action groups
  - allow validating multiple desktop files
  - improve help output
  - update man page
  + update-desktop-database
  - list only once a desktop file per mime type
  + misc
  - honor NOCONFIGURE=1
- Rebase desktop-file-utils-suse-keys.patch to new release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="8475545f8dfc4613091db9463979c091cb160411f6f2af0d372519107067af0f" name="desktop-file-utils" arch="x86_64">
  <version epoch="0" ver="0.23" rel="lp151.4.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="e04e4011e8bc23dceccb68111822194b5db69b4316c75dea00afd0c8c84a7de4" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="8f44474b8333c7a450e8a9c0a3f2fde47ded29ae65413f324c0491871500125b" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="fb1b59fc571ab6e4545960271f066597245309e6147899f451d20d94df6fb670" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="ba17cd1ea76499a33582ad5743781b8ea12e225079ae6105b25eaf54af44fb0a" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="ed95e12c5e55fbb7d5e8c72c1ded76f1c25d4c2431cf30f4b2beb6f3ba4cd51c" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="a80a2e627ea72fb80ad556c5b707a33243860be5e92e5a17cad4f11403f94f0e" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="3f2ec3eb669d85e30024237c9ff937c2118effe54160a5c2bfaf2cc95620d549" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="db779517b15e774cb35ab6efc6759b7a651f8d0c35bf3412e30b2be6ee0a42c5" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="91160f6cb4cb4720d373dec9fa9bfc744ce0c69f469272dd79bb50b4d373cc6f" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="227d85105020e5fba5dbd8344437fb54dcc63151446117e5cf13d83d951b6731" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="fe8c76c2cfa5bc7c7f9b932239929f1deac0eeb4ae47bbfa698829b154a2a0ca" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="0997667a44f06a5d8b0f88227544cee57522665ba1d331924b8fddd2c0909f67" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="bbb4fe8622fc0e6944213b9a201275f5637ba43d69b17f93aedba71804cd20e5" name="devscripts" arch="i586">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="fd19c18527651e1dd0d2e754e1be6521686763b70ff03bcc2f988abd5cc017eb" name="devscripts" arch="src">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
  <changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package devscripts separately</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712001">- fix build on Fedora
  * fix path to XSL stylesheets
  * build require dpkg-devel since dpkg-parsechangelog
  is in there in Fedora
  * do not pretend that the Makefile honors %_libexecdir
- fix scripts that use File::Path on SLE 11</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- no need to depend on a specific perl version</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to devscripts-2.12.4
  * dget: Fix CVE-2012-2241 (arbitrary file deletion)
  * dscverify: Fix CVE-2012-2240 (arbitrary code execution)
  * annotate-output: Fix to prevent symlink attack: don't delete
  safely-created file and reuse its name.  Instead, create temporary
  directory and create FIFOs therein.  Also, be sure to remove temporaries
  upon catchable signal.  Fixes CVE-2012-3500.
  * debdiff: Fix regression in exit code, introduced in 2.11.4.
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1349438400">- extend License header according to review. (bnc#783729)
- add debian/changelog and debian/copyright to package</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="86795aa70b3daec525c0bf32d1e84391b031910a6d5b127352db2680fbace32c" name="devscripts" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="lp151.3.5.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="38a3d8961f995249f5bc67958eed567aa6a3e49f9820a697ea8b1eceaa6c8412" name="dhcp" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="d1bb8fdc608d515f766fb88c937a06fd41eb2e7b957c14a6d62a23355a635c62" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="a6e3193d7967fd2c46b5132eb2af6f1a0925bc02996e41019af0c0cc4080a312" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="ebb72f2e17448a9e591644a968de4fe467399fd265952b751c1585fd0d7959f1" name="dhcp-client" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="30b776deb7d345a50092cf8b6cfaafef5513ec20227751ad6abec7d20eee3196" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="5b12fab459b34732cf204df0d2838e006d7c43c2c150bee529496704ca8409d8" name="dhcp-devel" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="ab9dc91a51d3322d1d65739e39f8d3a7be8f460da94080972cf5c953a38bae8b" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="e039c234bec197c63ed7e69b338a7cec43481c9b01fe0d36e931377a81b91c18" name="dhcp-doc" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="e2f30e04b2851068cba9704473bc04d58fad52557e203e0913015794e17b54c4" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="959d69f9c6572ba908fa1866f9e1dd4496ee1f30b51197a0dde3fb37ecac5624" name="dhcp-relay" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="39d417f9be976d0c3ceb9d58ac2f04b1d711831fd61ddc948c66d24dd7a018e9" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="46fe867a54b143e22c49d1c3561f1c6312f8b7e66ac96713cc043d3e857093b0" name="dhcp-server" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="f9b5fa831bddc4d9b2ddcc7d89c39877443e86388bce2b550fa8ff5f58c658bc" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp151.6.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="9881bd665306d5eb78edec8097041c5d291bfb04ddadc83bb174b37897e227b5" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="df568366cd496086180127d5b0b935a65e1777173d9a95301b9e2e1a25f353c1" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="lmichnovic@suse.cz" date="1181131200">- renamed lib to libdjvulibre15 according to Shared Library
  Packaging Policy
- splitted of devel package
- fixed calling ldconfig in post scripts</changelog>
  <changelog author="lmichnovic@suse.cz" date="1181563200">- fixed djvulibre-devel's Requires with %{version}; [#282833]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1184328000">- added trailing semicolon in desktop file (semicolon.patch)
- splitted off djview3 (Qt3) to make possible have alternative
  djview4 (Qt4) package</changelog>
  <changelog author="lmichnovic@suse.cz" date="1189425600">- moved desktop file to djview3 subpackage [#307485]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1197288000">- update to version 3.5.20
  obsoletes semicolon.patch, strip.patch
  * Csepdjvu handle gsdjvu hyperlink comments.
  * Djvudigital therefore handles hyperlinks.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="32a68dc5418a2660ecbd6051d743b069531ddf90df1e5d64a2c724727c825109" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="6337ab1dd7f30c343bf81b5bb1081f250e8d93694f4fc4f9bb879e2d1f01d8a0" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="db3eda52a9d15b2aad79dd3f9a9411629d76647fb69e0f7e9c59418da9175f09" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="lmichnovic@suse.cz" date="1184328000">- added trailing semicolon in desktop file (semicolon.patch)
- splitted off djview3 (Qt3) to make possible have alternative
  djview4 (Qt4) package</changelog>
  <changelog author="lmichnovic@suse.cz" date="1189425600">- moved desktop file to djview3 subpackage [#307485]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1197288000">- update to version 3.5.20
  obsoletes semicolon.patch, strip.patch
  * Csepdjvu handle gsdjvu hyperlink comments.
  * Djvudigital therefore handles hyperlinks.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="30781f177f87607277841a631ac780cfcf0bdc3448fababe4b130c7eb65b2ba9" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="e3708c302e5aa9530133de7306a21e9179eb5548fda1ea700d146b1f72734b15" name="djvulibre-doc" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="652347c27a97aba732b3f9aa9f256e7671ecf69671daabd2884add9aa6629f14" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="d2884bb8f7edc5fbeba23823119b80fe79ae6888e1354de28fac790b4e1d97bd" name="djvulibre-doc" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="4ebbfb87767c9c60454a9cae87585967ab127049439ce1aed3acf5fc0457a37c" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="3f2f10cd3c643bc73858af94947011e2c43bc9109de743dd9c138781211fb806" name="dkgpg" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp151.3.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="f92bf0e2754c07bc9b72fc0c08a4ab5d6cadd2b940a6f5546de452d4ebd4f01f" name="dkgpg" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.3.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="18b5dfd97cd8414985376ca23fb7e2d526e1916ba712dc115ddff96dc23198ec" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ae464162ac1c4b139a8368d6390e603edc021c95a5db712218251e091e1c02e8" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="971c0b04f6e7fe4743b3bb2a06029527b7732776498fd8b1d528ccd437c30229" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="aeaf421d4ba86d85af77294e08bb469a703d85a036691e5e94be546229c47c8f" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="4f3dc473aec2503cf26c60a61530e977fdc03606e5d78526f1cd03d1cc96b104" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="f7462a0dafb42a814547c28bdd0942efad6b5cadbf64e734bd901665be3c52a3" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="9b0f37a24a9e0a0aaec26986dc87ef733830f29e1bd8074da4e6031885b900ea" name="docker" arch="src">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="0a26347528f185221d44ed3f044edc108307f150e294ed422c608f7fd80d8729" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="ae23dc0311ce52a33e58273be1c5b646e97a91d74c99599ae3871df22ced9f13" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ed0f5ac636d5d02222e3b60b9455164a20e0387fef33a008a22d4bf9dd0a0a42" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="381279a0d3cc437f2ce5d553f2b39119bf215cf956552c2e35b90816ed76f8b5" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="fc5af47166213926cb820e14a187bbff30a82ad954c2e34094a5c5d33ff6b84e" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="c0e544f0b37f73e5afc2e8516a28f816b86b80f7b2459fc70d212d0d92dfb6dd" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="d8ac432f82691b4a7bb29f7ce8ed6bbb8d4c7f5db643f3e5242a679a81bbed0f" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp151.2.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="d2f0a42e19a86998f6d02c718ec832dd5057c98a996a9aff43d0f94cf8686a96" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="949beae7caacee1b66f0ec4818e5a2dad5ebb2b8709c5b43a919e106ed18c5d7" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="a30f4fb67075e268095dbf6df3e98719b0ea7f5d54fab16fcaf67cc1e8cfe4c3" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="e5d85bda96eb986a15e2f9ad8b01d9cfc6d1ea3bb38f6a48d49e4527f51d9c8c" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.6.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="6ae8d7059e767b254f12773fad5500303962ca6ebfb34eaa527157d25fa52c6a" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
</package>
<package pkgid="fdc413ff64ee9063562f22e4cd772fc475eb0cac68c803ae05d4b9755365b8ca" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp151.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
</package>
<package pkgid="4bd501d52ef5e29b1eceeb0523391970b3c4fda2a00e7d42ac7c0b0e7de853c7" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="5c8e260a360e7f9ff9d6292f1cbaa2b17cd483af3aa1cca6c97b47d705f214d3" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="bf5a79d7bc25ad8752f12752b41335bd770f50fd9656031c9195d0c1567c0084" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="7bf0400b8c2f151f70228260eca2f12fc11c037b90cf5c6c7284e35a7fadabc5" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="548b37c884130d5b4bd0bed97bdbfc30232c5efd32be78b3a87368d92a5801c8" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="963c48b2514a739206431fb90dcdf3e524c7aa26d655e81e095e91ff08b161a6" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="f85abf6b36344d026a40a856365b16a8237e503cc9e9ecb72e7cc43a8cb7ea12" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="b5a04bfc9fe83274e327885d3f68e0e9818fcef0f0aa8fc3419610b1aa222cd0" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.9.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="b7f15ce4ebb74dac5d2e08798be8940f1328e363a889de19086e9b06688e3afe" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp151.2.12.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="1c31ee887d556e61183671dcb940d7afda0e7bd6c1d4d8aabd5b8b449df8b85c" name="dolphin" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="9ac027357bd64ca0bc63021e821dced3364b0352b01b4043ed4fdaa5c2fe4f37" name="dolphin" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="c08695f4caf251672431b777785a7c397ab8a1914df3a12f9e40711c7e9caef0" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="59693897581c1d7c6a3d576cb7498a3f0e0a3c228a7958f0e5e69209e30fb55a" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="91939757316edbaa82589a0b41cef9d41498833f2af931feaf927d9a8c75ccbd" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="175f1122d735a46f47d76245559734e1af9ae9707681d41d83f9f4e52dcf21f8" name="dosbox" arch="src">
  <version epoch="0" ver="0.74.3" rel="lp151.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1180094400">- dont rm -rf %buildroot in %prep</changelog>
  <changelog author="lnussel@suse.de" date="1185796800">- new version 0.71
  * Added a new recompiling cpu core which is easier to port!
  * Added a x86_64 and a mipsel_32 recompiling core.
  * Fixed hangups on certain platforms after long gameplay of
    several games.
  * Fix several joystick bugs.
  * Improved cdrom support. (fixes for audio, iso and detection.)
  * Improved SVGA and VESA. (detection and display)
  * Fixed a few textmodes and improved ansi emulation a bit.
  * Fixed pcspeaker and certain types of soundeffects.
  * Added undocumented mousebackdoor.
  * Made mount and imgmount a bit easier to use. (ioctl by default,
    support for ~ and ~username, auto size guessing for images)
  * Fix a few compilation problems on various hosts and a general
    code cleanup.
  * Several small fixes that improve compatibility.</changelog>
  <changelog author="lnussel@suse.de" date="1188302400">- new version 0.72
  * Fixed unitialized variable in joystick. (Fixes crashes on Vista and
    Mac OS X)
  * Some bugfixes and speedups to the 64 bit recompiling core.
  * Fixed sign flag on soundblaster dma transfers (Space Quest 6 intro)
  * Fixed a bug in keyboard layout processing code and fixed certain
    layouts.
  * Fixed Dreamweb.
  * Improved speed unlocking when running cycles=max.
  * Fixed a crash related to the tab completion in the shell.
  * Improved aspect correction code. Should now be like how a real monitor
    handles it.
  * Fixed a bug in the xms status report code. (Blake Stone 1.0 shareware)
  * Added a lot more keyboard layouts.
  * Fix crash related to changing the scaler before a screen was created.
  * Hopefully fixed compilation on *bsd.
  * Enabled auto cpu core selection for recompiling core as well.
  * Made the used joystick selectable when 4axis is specified.
  * Added some hints for inexperienced DOS users to the shell.</changelog>
  <changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
  <changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
  <changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
  <changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="e897e0d9174d4157e1cdc5ba0f5075e2006caa97d65ea4b5f4458436f059282d" name="dosbox" arch="x86_64">
  <version epoch="0" ver="0.74.3" rel="lp151.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="06b407dc0885d4f309b6fcca9522ad45624ce426f40b60adccee3b169b3c49c4" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="cad1872f7c6e10bab20e8c53cea6ef025a117090c23997330e3ee080588f7f3e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="46353770d5309b486e4141aca4a5d8269059c1784ad955442aa2ee9eea4199e1" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="02c86dfc9bfcc519ecc9b55fb28f7bdc9b6d98db22dfac55cbe82b6db484276e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="61f3ab47bd07ab7e00b00e94fd90a7c49fe5fe2317a4d814ee8d3a099a689e13" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="ead71171a4998c880726fd227ed0dd3a0bef45affe6522c5952ac3edb9aa154b" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="c70fcebd74d871a368432ea7184cd92ec7d6b8aa4f5839bfc81278889bd3f9dc" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="9e75d9afbd247a483030aeea773b700a3179a135103109b035d2dc72ffe1f452" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="a2f4a1945a706c78b98d5a8b8c710f96431e8a37c66cd839833fff39fc8ff5b6" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="1c982d0076018861dc842f0a7221e0b224b93cecc83cde7acaae08e4f4f7e05b" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="ee7402846b8aa3e769e0c961358d7337067966227fbb2814cc82a22cbf8b34f0" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="b378e35ae81a30c4e16cbbb3a34feeea6ec5ff99275cde2c410ed642f9e0f0ff" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="5a5b8190f279c51fd82e10b424aee7e5b0845cf4da376179f5e912fa5f84ca1b" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="489a096a9f0dd8a04c539a5d9e5c5d490ca93157a6cc06f7203c8ab8191d9153" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="45381c7af86b152bcb4cd949c60802be82d85cc2a23ef74f978417d4cbba56b0" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="c48968682e2169374c3125da3bb866823e5a3f182039e528999b176fd5918421" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="2f7673ef2f024842a82fb5ca3887c3c53e9f328ecb9294e8e2efbee639e89b8a" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="487bec5d64dccb148aff454676abb0a81f64a4adbfa6db1cf1c8be8d872bf1d1" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="7d3158a2294752d565e628d85411febea3d02c5b1613132148d981725b9df0f0" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="bc51e4a9e5d02d5590f353ec3a1a0fb2a1b2096fa3990decd215a8c2151cb41b" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="031ec75d2ce5f34c57cc4eb9b259e008087c494a5156d086fbf1fb5ac76b82e0" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="841d21ae2a1e9c81472e12adacc2514294e47b22590ef5a46dd5fb2a97b33294" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="f37eec0aae61e3dbc07e1324f6e5e434db1045e80f831d82c6080b2a64704def" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="32eb099c140397e1d7b2c9837a6493fe6146ec5c1e356a36fe8f2de97833fd4c" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="93919681b308d2fd1a57e9ac85772d190a1cbdade145f22c4d0efa18ca4896dd" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="34fe8836b28cf74b92d5d93c83c151eef786fea115defe5a7973d7614baf7de7" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="a441ff4c3671ff9a82d7561772969e112b5fc06e7de313d7e18f6a7098a3f0df" name="dracut" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="354d76fc84d67e23d89b785aa008a6d33af6633cd25b76751a4c18a9c965576b" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="61a25c329606a50d3da7b745f4b065e7bb7fb485e4d9199b40df3c50327df354" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="1339e665e4c22bf2684083d8c2ee59c64ea988df013fb8ee4165d37df968c017" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="98e149c9362c45d8084eb918f1ed164071f6adaefa97327a532e1dc61e5fd33f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="9a92f99e6c9001123d294be72a859b9cf9c0008c7a6c9b1bd497fec28d4b1d52" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="2e559452254e9d4197696b687724783a7dfe7fd679f055f5472ec64f42bdbe5d" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="3435f33dc2545a7ecf3e3c3ab6b243344c6b56498252be7e2aa3f8f3fb336b84" name="dracut-fips" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="9f302cf2add69acca6abaf4dcae0d4b1c0c65c3a2fc8b912cab24cb8796917fa" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="cf64cb6574e1b4efa531e5110cd5083a3f8432c50d11d058c2908ed9a252364e" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="450df1dffc3f935ffab1345b845ce9a3d6709b82aecdcfbd1e48d7d71d1b9f02" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="9c2328b27a72ccacf40d43435272708975b19d4b2d6e34643ae36332acc632b5" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="83e075f8908ecff8d4d9d7ea4a06d3508f963c17fea470b795a71bf2f82ad99f" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="57d9aab579ec9e35463f6fbf4c006b8aee5f6cd432bfcd8a47f9f89ed2dc4a1a" name="dracut-ima" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="89510ab91931c4dd93a668826c50c187c88a2c2740eee81a0b4b4aa26d87dddb" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="5df3c667443ff0d998e2c083157fa2ddb60d0caa4b166f15d5371259cd158cd1" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="d9379467db00b3e327b17a1eaa3b8dbe1807a9d28fb6aee2f694f30f9f69ab81" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="aa71a5e77a4cb9e5215f18de56318a737b0cd42083178193479adee4a4c7abb0" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="758b1b8af0fbb03d5dcbfdb9faed2cfc503d7045ae37d686a40508553819b63d" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="84aed104731d4693217f88b4cf4684298a4bc28b2cd56f1c41c64cd0df6065d7" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="0d6e202140654999d2f6ea69b092e745e970500510fed22296621446ab3e4b30" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="1a3e1c8f06b160c85b698c0d6526199e2366832a130c4cd6ac37d0764008873b" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="fc5a7258027ac2213f0f0eab660932c25ac321dc1c26a88866177c3311905d63" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="71d0e7ee84ebc003e21bceef4a6473f6c080afdfa3c97fbaf5550c9d0e92c315" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="65a110c0fadc017d86e01dbc414c47a7a832f5d41a36b6ed030abd9e54670ce2" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="af045794bd530bdbb58947deb5b985540a299974081bf1ba2781cfb7363070a6" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="cccfe198acfa080fd28e018eeb1ff562fb47402ab3309aac762b12ae43a03423" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="4ac52301128950054db89c7aba747a3d1db9b9ff47adb2adfa983fa379510e00" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="294d6dffa459742e1da0218fa0f80c651b9d33a2519a50b0d0fb588d98f1af34" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="c8a6da23bd8fdeb213281322c00df4d4a5d02dd926a10224a4270d7bf847d58c" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="95fda659b0a098e98721c3064041002c42f271a70fc577a223e86104513ad631" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="76b35dfc856a838dc5c105fbe5c918535e3c6ea6ce60567c470ad2f71394a9c5" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="088ed5cef33bd1fc70bd4d55cad0b8d30ce0425e3f33e5a2587ee4a73b80c98f" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="f48bae1bc33a7d64ded6828b2aabbfde02b26472ef5121ff767529968bdb53c7" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="32bad182a87e467d9310aa6046fca75a8eb55dc43f1634d8f053aafd6bcc76a1" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="3b246bb3957c72b1bf34ea7b5714f79c2d0cc6c900abc04d53a88f7f9c6b4d28" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="81ce445a5e17cc5075d009834e6ebe1ca57552d56a6999adac4fc0100e6706e7" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.3.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="58bbc2359b73397b2d62d054b4c54c4bdce5e8fbedf951829557750ad8c8bd36" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="f19fc90316be861d52379ebdb3a7998ba09b237d2ec204d19a1fc85686ce5a31" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.6.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
</package>
<package pkgid="ed519bd0ca09a28450bc1a93462fb432938ae901e323e97c63c4166e1b0e7dfd" name="dracut-tools" arch="i586">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="a684792393099e5855c19d0d375abdc1b45a572cbe327f94cbef07d3895cf603" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp151.2.9.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564142400">- Fix merge error (bsc#1142775)
  * modifies 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1564574400">- Fix keymaps not getting included sometimes (bsc#1140872)
  * adds 0610-10i18n-Fix-keymaps-not-getting-included-sometimes.patch
  This requires a backport of the following fixes:</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1567771200">- 95iscsi: only login to one target at a time (bsc#1121238)
  * adds 0611-Dracut-only-login-to-one-target-at-a-time.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569844800">- dracut-init.sh: Support xz compressed firmware files (boo#1151552)
  * Added 0613-dracut-init.sh-Support-xz-compressed-firmware-files.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1569931200">- ifup.sh: several fixes for dhcp calls with multiple nics (bsc#1150343)
  * Added 0616-ifup.sh-several-fixes-for-dhcp-calls-with-multiple-n.patch
- fixup "Dracut: only login to one target at a time" (bsc#1152650)
  * Added 0615-fixup-Dracut-only-login-to-one-target-at-a-time.patch
- 35network-legacy: only skip waiting for interfaces if (bsc#1152006)
  * Added 0614-35network-legacy-only-skip-waiting-for-interfaces-if.patch</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571832000">- iscsiroot.sh clean up obsolete case statement fragments (bsc#1153944)
  * add 0617-iscsiroot.sh-remove-fragments-of-obsolete-case-state.patch</changelog>
</package>
<package pkgid="afeb83fc4b8e8dca08d2cbc8ce87a46a4506d573d2fb6031597bd98f0ae89e55" name="drbd" arch="src">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="533dc6e1dee7863297698474b13bd040538a5a2a4abbb8561cc9e46a1977f9c7" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="982f730f879cf4563f04f364e5058301fa557a070aecaebd298f27a44fb19a3b" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.3.7" rel="lp151.2.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
</package>
<package pkgid="1648f4d02a6166befe363cf2f338354b93a9eb3b52912d064d0bec4c602592f4" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.3.7" rel="lp151.2.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
</package>
<package pkgid="615d377dcdc5ea1efe87664526aad45460d4e908cbc779d2f420373a6b9ec580" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.16+git.ab9777df_k4.12.14_lp151.28.16" rel="lp151.5.3.1"/>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="fdd8a2783b141dd24d831e88906e26cc32087cee8a674aa05a2aef56fcef0037" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.6.0" rel="lp151.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="e5fb0de387afa11bf4ad9585d9b199aef54585090cbedd35f257bb1d413112be" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.6.0" rel="lp151.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="8ea183d6ff57e9db780b302e644efd71dae6cd0b305a70b409392ce0213f6b7e" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0137324c0c0cb10bdd0e9f8f6219cad68a3337d3d1b352a41d5d53c506ac6d86" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="c6da6575f7cab5f00095e85ae5d64f906ac29f372ff5900198b168d9d9596748" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="f9aa12a03eddc9c99ebada2471d1df15862f63a98dad05b7bb02bf50e6665372" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="08bbd4af46542ddb730e3950acf29dbdfc65d82c61384ce5e00bd862d1410ee9" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="fd34c8635c03a1d65d705ff22c578852ae50d4d18fa41aaf3388269d41119b94" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="61a074642fe64bf83214b8df9f05b7e452b64c7f77595f7306785e30b349bcfd" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="eaa3e1b544ebfdce867e30d6a42acba50e22a3199553a5aa6d17f8484a84aad2" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="a4271f68e2b49c474a4965f603d41df763c4e28cb080cd580c82a58775b087f0" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="67757929ac70c815959f6b905bdcc1fae17075eb0ee704fe35e4507d1bb475ab" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="a79643bbb3d65497178e6b45f5f8a86cba3e135fdfb6ce1cb6d9edee017a419d" name="ebtables" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="8faf49d3bb80ad167448199e1e790892612eb4d5466732b6789ddac36b2edba8" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="lnussel@suse.de" date="1306843200">- cleanup up initscript
  * don't use /var/lock/subsys
  * read /etc/sysconfig/ebtables for setting and restore state from
    /etc/ebtables where the script actually saved the state to.</changelog>
  <changelog author="puzel@novell.com" date="1307361600">- update to 2.0.9-2
  * fix unwanted zeroing of counters in the last user-defined chain
  * fix hidden symbol compilation error when using ld directly
  * fix return value checking of creat to give a correct error
    message if the atomic file couldn't be created
  * correct info in INSTALL about compilation of ulog
- use spec-cleaner
- update ebtables-v2.0.8-makefile.diff
- license is GPLv2, not GPLv2+
- package COPYING and ChangeLog files</changelog>
  <changelog author="jengelh@medozas.de" date="1310299200">- update to 2.0.10.1
  * fix --among-dst-file, which translated to --among-src
  * Makefile: respect LDFLAGS during ebtables build
  * Makefile: create directories to avoid build failure when DESTDIR
  is supplied
  * incorporate fixes for possible issues found by Coverity analysis
  * extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  * add --concurrent option, which enables using a file lock to
  support concurrent scripts updating the ebtables kernel tables
- run spec-beautifier over specfile</changelog>
  <changelog author="jengelh@medozas.de" date="1313064000">- Update to new upstream release 2.0.10.2
  * minor compilation fixes: respect LDFLAGS in Makefiles
- Remove obsolete ebtables-typepuns.diff patch (fixed upstream)</changelog>
  <changelog author="jengelh@medozas.de" date="1323000000">- Update to new upstream release 2.0.10.3
  * fix a counter setting bug</changelog>
  <changelog author="jengelh@medozas.de" date="1323950400">- Update to new upstream release 2.0.10.4
  * previous counter bug was still present and has been addressed now</changelog>
  <changelog author="jengelh@inai.de" date="1355918400">- Have build succeed on non-SUSE</changelog>
  <changelog author="vcizek@suse.com" date="1393588800">- add missing BuildRequires: sed (bnc#865848)</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Remove support for old distros from specfile
  (prjconf can do substitutions instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="940fad71e69e9ce7946ebd2a8b661915b3c215b51239153c082723bf88401701" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp151.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="c94226f4fa20fbf40f21089e3c5645d7aea96e725b84dfa40416b21f815dc968" name="eigen3" arch="src">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="spencerandrewjackson@yahoo.com" date="1360670400">- Add eigen-3.1.2-remove-include-of-removed-header-file.patch
  * Backport 6f233061d009cdb9e79a5201e02599a72ec249c1 from upstream
  * Allow SparseCore to be included without compiler error</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1368964800">- Update to version 3.1.3:
  * Bug 526 - Fix linear vectorized transversal in linspace.
  * Bug 551 - Fix compilation issue when using EIGEN_DEFAULT_DENSE_INDEX_TYPE.
  * Bug 533 - Fix some missing const qualifiers in Transpose
  * Fix a compilation with CGAL::Gmpq by adding explicit internal:: namespace
    when calling abs().
  * Fix computation of outer-stride when calling .real() or .imag().
  * Fix handmade_aligned_realloc (affected conservativeResize()).
  * Fix sparse vector assignment from a sparse matrix.
  * Fix log(0) with SSE.
  * Fix bug in aligned_free with windows CE.
  * Fix traits of Map&lt;Quaternion.
  * Fix a few warnings (507, 535, 581).
  * Enable SSE with ICC even when it mimics a gcc version lower than 4.2
  * Workaround gcc-4.7 bug #53900 (too aggressive optimization in our alignment
    check).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1376308800">- Update to version 3.2.0:
  * See http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.2.0 for
    changes.
- Removed eigen-3.1.2-remove-include-of-removed-header-file.patch (fixed
  upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1397131200">- Update to version 3.2.1:
  * Eigen2 support is now deprecated and will be removed in version 3.3.
  Core:
  * Bug fix for Ref object containing a temporary matrix.
  * Bug 654: Allow construction of row vector from 1D array.
  * Bug 679: Support cwiseMin() and cwiseMax() on maps.
  * Support conservativeResize() on vectors.
  * Improve performance of vectorwise and replicate expressions.
  * Bug 642: Add vectorization of sqrt for doubles, and make sqrt really safe
    if EIGEN_FAST_MATH is disabled.
  * Bug 616: Try harder to align columns when printing matrices and arrays.
  * Bug 579: Add optional run-time parameter to fixed-size block methods.
  * Implement .all() and .any() for zero-sized objects
  * Bug 708: Add placement new and delete for arrays.
  * Bug 503: Better C++11 support.
  Dense linear algebra:
  * Bug 689: Speed up some matrix-vector products by using aligned loads if
    possible.
  * Make solve in FullPivHouseholderQR return least-square solution if there
    is no exact solution.
  * Bug 678: Fix fullPivHouseholderQR for rectangular matrices.
  * Fix a 0/0 issue in JacobiSVD.
  * Bug 736: Wrong result in LDLT::isPositiveDefinite() for semi-definite
    matrices.
  * Bug 740: Fix overflow issue in stableNorm().
  * Make pivoting HouseholderQR compatible with custom scalar types.
  Geometry:
  * Fix compilation of Transform * UniformScaling
  Sparse matrices:
  * Fix elimination tree and SparseQR for fat rectangular matrices.
  * Bug 635: add isCompressed to MappedSparseMatrix for compatibility.
  * Bug 664: Support iterators without operator&lt; in setFromTriplets().
  * Fixes in SparseLU: infinite loop, aliasing issue when solving, overflow in
    memory allocation, use exceptions only if enabled (bug 672).
  * Fixes in SparseQR: reduce explicit zero, assigning result to map, assert
    catching non-conforming sizes, memory leak.
  * Bug 681: Uninitialized value in CholmodSupport which may lead to incorrect
    results.
  * Fix some issues when using a non-standard index type (bug 665 and more)
  * Update constrained CG (unsupported module) to Eigen3.
  OS and build system:
  * MacOS put OpenGL header files somewhere else from where we expected it.
  * Do not assume that alloca() is 16-byte aligned on Windows.
  * Compilation fixes when using ICC with Visual Studio.
  * Fix Fortran compiler detection in CMake files.
  * Fix some of our tests (bugs 744 and 748 and more).
  * Fix a few compiler warnings (bug 317 and more).
  * Documentation fixes (bugs 609, 638 and 739 and more).
- Renamed the package from libeigen3-devel to eigen3. Added eigen3-devel
  subpackage with the necessary Provides/Obsoletes entries for libeigen3-devel.</changelog>
  <changelog author="dvaleev@suse.com" date="1406721600">- Disable altivec on ppc64le. eigen3 have no LE altivec inplemented
  yet.
- added patches:
  * 0001-Disable-Altivec-for-ppc64le.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1406808000">- Allign the stack on powerpc
- added patches:
  * 0001-Do-stack-allignment-on-ppc.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407585600">- Update to version 3.2.2:
  Core:
  * Relax Ref such that Ref&lt;MatrixXf&gt; accepts a RowVectorXf which can be seen
    as a degenerate MatrixXf(1,N)
  * Fix performance regression for the vectorization of sub columns/rows of
    matrices.
  * EIGEN_STACK_ALLOCATION_LIMIT: Raise its default value to 128KB, make use
    of it to assert on maximal fixed size object, and allows it to be 0 to
    mean "no limit".
  * Bug 839: Fix 1x1 triangular matrix-vector product.
  * Bug 755: CommaInitializer produced wrong assertions in absence of
    Return-Value-Optimization.
  Dense solvers:
  * Add a rank() method with threshold control to JacobiSVD, and make solve
    uses it to return the minimal norm solution for rank-deficient problems.
  * Various numerical fixes in JacobiSVD, including:bug 843, and the move from
    Lapack to Matlab strategy for the default threshold.
  * Various numerical fixes in LDLT, including the case of semi-definite
    complex matrices.
  * Fix ColPivHouseholderQR::rank().
  * Bug 222: Make temporary matrix column-major independently of
    EIGEN_DEFAULT_TO_ROW_MAJOR in BlockHouseholder.
  Sparse:
  * http://eigen.tuxfamily.org/bz/show_bug.cgi?id=838 Bug 838]: Fix dense
  * sparse and sparse * dense outer products and detect outer products from
    either the lhs or rhs.
  * Make the ordering method of SimplicialL[D]LT configurable.
  * Fix regression in the restart mechanism of BiCGSTAB.
  * Bug 836: extend SparseQR to support more columns than rows.
  * Bug 808: Use double instead of float for the increasing size ratio in
    CompressedStorage::resize, fix implicit conversions from int/longint to
    float/double, and fix set_from_triplets temporary matrix type.
  * Bug 647: Use smart_copy instead of bitwise memcpy in CompressedStorage.
  * GMRES: Initialize essential Householder vector with correct dimension.
  Geometry:
  * Bug 807: Missing scalar type cast in umeyama()
  * Bug 806: Missing scalar type cast in Quaternion::setFromTwoVectors()
  * Bug 759: Removed hard-coded double-math from Quaternion::angularDistance.
  OS, build system and doc:
  * Fix compilation with Windows CE.
  * Fix some ICEs with VC11.
  * Check IMKL version for compatibility with Eigen
  * Bug 754: Only inserted (!defined(_WIN32_WCE)) analog to alloc and free
    implementation.
  * Bug 803: Avoid char* to int* conversion.
  * Bug 819: Include path of details.h file.
  * Bug 738: Use the "current" version of cmake project directories to ease
    the inclusion of Eigen within other projects.
  * Bug 815: Fix doc of FullPivLU wrt permutation matrices.
  * Bug 632: doc: Note that dm2 = sm1 + dm1 is not possible
  * Extend AsciiQuickReference (real, imag, conjugate, rot90)
- Added metis-devel build requirement for openSUSE &gt; 13.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="cd3c79ada62eed2ad4c9c48f8156d1a9caf1002112819d9fd2adc60b71a3ddfe" name="eigen3-devel" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="d1edd11220fa603f41dd0368e65b3b840462f393cd15b5112175d9e00d1e2af6" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="lp151.4.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1429704000">- Update to version 3.2.4:
  * Fix compilation regression in Rotation2D
  * Bug 920: fix compilation issue with MSVC 2015.
  * Bug 921: fix utilization of bitwise operation on enums in
    first_aligned.
  * Fix compilation with NEON on some platforms.
  From version 3.2.3:
  Core:
  * Enable Mx0 * 0xN matrix products.
  * Bug 859: fix returned values for vectorized versions of
    exp(NaN), log(NaN), sqrt(NaN) and sqrt(-1).
  * Bug 879: tri1 = mat * tri2 was compiling and running
    incorrectly if tri2 was not numerically triangular. Workaround
    the issue by evaluating mat*tri2 into a temporary.
  * Bug 854: fix numerical issue in
    SelfAdjointEigenSolver::computeDirect for 3x3 matrices.
  * Bug 884: make sure there no call to malloc for zero-sized
    matrices or for a Ref&lt;&gt; without temporaries.
  * Bug 890: fix aliasing detection when applying a permutation.
  * Bug 898: MSVC optimization by adding inline hint to
    const_cast_ptr.
  * Bug 853: remove enable_if&lt;&gt; in Ref&lt;&gt; ctor.
  Dense solvers:
  * Bug 894: fix the sign returned by LDLT for multiple calls to
    compute().
  * Fix JacobiSVD wrt underflow and overflow.
  * Bug 791: fix infinite loop in JacobiSVD in the presence of
    NaN.
  Sparse:
  * Fix out-of-bounds memory write when the product of two sparse
    matrices is completely dense and performed using pruning.
  * UmfPack support: fix redundant evaluation/copies when calling
    compute(), add support for generic expressions as input, and
    fix extraction of the L and U factors (Bug 911).
  * Improve SparseMatrix::block for const matrices (the generic
    path was used).
  * Fix memory pre-allocation when permuting inner vectors of a
    sparse matrix.
  * Fix SparseQR::rank for a completely empty matrix.
  * Fix SparseQR for row-major inputs.
  * Fix SparseLU::absDeterminant and add respective unit test.
  * BiCGSTAB: make sure that good initial guesses are not
    destroyed by a bad preconditioner.
  Geometry:
  * Fix Hyperplane::Through(a,b,c) when points are aligned or
    identical.
  * Fix linking issues in OpenGLSupport.
  OS, build system and doc:
  * Various compilation fixes including: bug 821, bug 822,
    bug 857, bug 871, bug 873.
  * Fix many compilation warnings produced by recent compilers
    including: bug 909.
  * Bug 861: enable posix_memalign with PGI.
  * Fix BiCGSTAB doc example.</changelog>
  <changelog author="mpluskal@suse.com" date="1441454400">- Update to 3.2.5
  * Changes with main impact:
    + Improve robustness of SimplicialLDLT to semidefinite problems
    by correctly handling structural zeros in AMD reordering
    + Re-enable supernodes in SparseLU (fix a performance
    regression in SparseLU)
    + Use zero guess in ConjugateGradients::solve
    + Add PermutationMatrix::determinant method
    + Fix SparseLU::signDeterminant() method, and add a
    SparseLU::determinant() method
    + Allows Lower|Upper as a template argument of CG and MINRES:
    in this case the full matrix will be considered
    + Bug 872: remove usage of std::bind* functions (deprecated in
    c++11)
  * Numerical robustness improvements:
    + Bug 1014: improve numerical robustness of the 3x3 direct
    eigenvalue solver
    + Bug 1013: fix 2x2 direct eigenvalue solver for identical
    eigenvalues
    + Bug 824: improve accuracy of Quaternion::angularDistance
    + Bug 941: fix an accuracy issue in ColPivHouseholderQR by
    continuing the decomposition on a small pivot
    + Bug 933: improve numerical robustness in RealSchur
    + Fix default threshold value in SPQR
  * Other changes:
    + Fix usage of EIGEN_NO_AUTOMATIC_RESIZING
    + Improved support for custom scalar types in SparseLU
    + Improve cygwin compatibility
    + Bug 650: fix an issue with sparse-dense product and
    rowmajor matrices
    + Bug 704: fix MKL support (HouseholderQR)
    + Bug 705: fix handling of Lapack potrf return code (LLT)
    + Bug 714: fix matrix product with OpenMP support
    + Bug 949: add static assertions for incompatible scalar
    types in many of the dense decompositions
    + Bugs 957, 1000: workaround MSVC/ICC compilation issues when
    using sparse blocks
    + Bug 969: fix ambiguous calls to Ref
    + Bugs 972, 986: add support for coefficient-based product
    with 0 depth
    + Bug 980: fix taking a row (resp. column) of a column-major
    (resp. row-major) sparse matrix
    + Bug 983: fix an alignement issue in Quaternion
    + Bug 985: fix RealQZ when either matrix had zero rows or
    columns
    + Bug 987: fix alignement guess in diagonal product
    + Bug 993: fix a pitfall with matrix.inverse()
    + Bugs 996, 1016: fix scalar conversions
    + Bug 1003: fix handling of pointers non aligned on scalar
    boundary in slice-vectorization
    + Bug 1010: fix member initialization in IncompleteLUT
    + Bug 1012: enable alloca on Mac OS or if alloca is defined
    as macro
    + Doc and build system: 733, 914, 952, 961, 999
- Use cmake macros
- Use url for source
- Cleanup spec file with spec-cleaner
- Remove conditional buildrequires for releases which did not
  build anyway</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 3.2.7
  * Add support for dense.cwiseProduct(sparse).
  * Fix a regression regarding (dense*sparse).diagonal().
  * Make the IterativeLinearSolvers module compatible with MPL2-only
    mode by defaulting to COLAMDOrdering and NaturalOrdering for ILUT
    and ILLT respectively.
  * Bug 266: backport support for c++11 move semantic
  * operator/=(Scalar) now performs a true division (instead of mat*(1/s))
  * Improve numerical accuracy in LLT and triangular solve by using
    true scalar divisions (instead of mat * (1/s))
  * Bug 1092: fix iterative solver constructors for expressions as input
  * Bug 1088: fix setIdenity for non-compressed sparse-matrix
  * Bug 1086: add support for recent SuiteSparse versions
  * Add overloads for real-scalar times SparseMatrix&lt;complex&gt; operations.
    This avoids real to complex conversions, and also fixes a compilation
    issue with MSVC.
  * Use explicit Scalar types for AngleAxis initialization
  * Fix several shortcomings in cost computation (avoid multiple
    re-evaluation in some very rare cases).
  * Bug 1090: fix a shortcoming in redux logic for which
    slice-vectorization plus unrolling might happen.
  * Fix compilation issue with MSVC by backporting
    DenseStorage::operator= from devel branch.
  * Bug 1063: fix nesting of unsupported/AutoDiffScalar to prevent
    dead references when computing second-order derivatives
  * Bug 1100: remove explicit CMAKE_INSTALL_PREFIX prefix to conform
    to cmake install's DESTINATION parameter.
  * unsupported/ArpackSupport is now properly installed by make install.
  * Bug 1080: warning fixes
- Changes from version 3.2.6
  * fix some compilation issues with MSVC 2013, including bugs 1000 and 1057
  * SparseLU: fixes to support EIGEN_DEFAULT_TO_ROW_MAJOR (bug 1053), and
    for empty (bug 1026) and some structurally rank deficient matrices (bug 792)
  * Bug 1075: fix AlignedBox::sample() for Dynamic dimension
  * fix regression in AMD ordering when a column has only one off-diagonal
    non-zero (used in sparse Cholesky)
  * fix Jacobi preconditioner with zero diagonal entries
  * fix Quaternion identity initialization for non-implicitly convertible types
  * Bug 1059: fix predux_max&lt;Packet4i&gt; for NEON
  * Bug 1039: fix some issues when redefining EIGEN_DEFAULT_DENSE_INDEX_TYPE
  * Bug 1062: fix SelfAdjointEigenSolver for RowMajor matrices
  * MKL: fix support for the 11.2 version, and fix a naming conflict (bug 1067)
  * Bug 1033: explicit type conversion from 0 to RealScalar
-</changelog>
  <changelog author="Rene.vanPaassen@gmail.com" date="1448625600">- Specify eigen header install dir; otherwise the pkgconfig file
  defaults to -Iinclude/eigen3</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1467288000">- Update to version 3.2.8:
  Main fixes and improvements:
  * Make FullPivLU::solve use rank() instead of nonzeroPivots().
  * Add EIGEN_MAPBASE_PLUGIN
  * Bug 1166: fix issue in matrix-vector products when the
    destination is not a vector at compile-time.
  * Bug 1100: Improve cmake/pkg-config support.
  * Bug 1113: fix name conflict with C99's "I".
  * Add missing delete operator overloads in
    EIGEN_MAKE_ALIGNED_OPERATOR_NEW
  * Fix (A*B).maxCoeff(i) and similar.
  * Workaround an ICE with VC2015 Update1 x64.
  * Bug 1156: fix several function declarations whose arguments
    were passed by value instead of being passed by reference
  * Bug 1164: fix std::list and std::deque specializations such
    that our aligned allocator is automatically activatived only
    when the user did not specified an allocator (or specified the
    default std::allocator).
  Others:
  * Fix BLAS backend (aka MKL) for empty matrix products.
  * Bug 1134: fix JacobiSVD pre-allocation.
  * Bug 1111: fix infinite recursion in
    sparse-column-major.row(i).nonZeros() (it now produces a
    compilation error)
  * Bug 1106: workaround a compilation issue in Sparse module for
    msvc-icc combo
  * Bug 1153: remove the usage of __GXX_EXPERIMENTAL_CXX0X__ to
    detect C++11 support
  * Bug 1143: work-around gcc bug in COLAMD
  * Improve support for matrix products with empty factors.
  * Fix and clarify documentation of Transform wrt
    operator*(MatrixBase)
  * Add a matrix-free conjugate gradient example.
  * Fix cost computation in CwiseUnaryView (internal)
  * Remove custom unaligned loads for SSE.
  * Some warning fixes.
  * Several other documentation clarifications.
- Updated build requirement superlu to superlu-devel.
- Added a patch "eigen_pkgconfig.patch" to fix pkg-config file
  includedir (taken from Fedora).
- Added a patch "01_install_FindEigen3.patch" to install
  FindEigen3.cmake (taken from Fedora).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470571200">- Update to version 3.2.9:
  Main fixes and improvements:
  * Improve numerical robustness of JacobiSVD (backported from 3.3)
  * Bug 1017: prevents underflows in makeHouseholder
  * Fix numerical accuracy issue in the extraction of complex
    eigenvalue pairs in real generalized eigenvalue problems.
  * Fix support for vector.homogeneous().asDiagonal()
  * Bug 1238: fix SparseMatrix::sum() overload for un-compressed
    mode
  * Bug 1213: workaround gcc linking issue with anonymous enums.
  * Bug 1236: fix possible integer overflow in sparse-sparse
    product
  * Improve detection of identical matrices when applying a
    permutation (e.g., mat = perm * mat)
  * Fix usage of nesting type in blas_traits. In practice, this
    fixes compilation of expressions such as A*(A*A)^T
  * CMake: fixes support of Ninja generator
  * Add a StorageIndex typedef to sparse matrices and expressions
    to ease porting code to 3.3
    (see http://eigen.tuxfamily.org/index.php?title=3.3#Index_typedef)
  * Bug 1200: make aligned_allocator c++11 compatible (backported
    from 3.3)
  * Bug 1182: improve generality of abs2 (backported from 3.3)
  * Bug 537: fix compilation of Quaternion with Apples's compiler
  * Bug 1176: allow products between compatible scalar types
  * Bug 1172: make valuePtr and innerIndexPtr properly return null
    for empty sparse matrices.
  * Bug 1170: skip calls to memcpy/memmove for empty inputs.
  Others:
  * Bug 1242: fix comma initializer with empty matrices.
  * Improves support for MKL's PARDISO solver.
  * Fix a compilation issue with Pastix solver.
  * Add some missing explicit scalar conversions
  * Fix a compilation issue with matrix exponential (unsupported
    MatrixFunctions module).
  * Bug 734: fix a storage order issue in unsupported Spline module
  * Bug 1222: fix a compilation issue in AutoDiffScalar
  * Bug 1221: shutdown some GCC6's warnings.
  * Bug 1175: fix index type conversion warnings in sparse to dense
    conversion.
- Removed build requirements gnu-free-fonts and texlive-amsfonts
  (not needed anymore).</changelog>
  <changelog author="olaf@aepfle.de" date="1483531200">- Require texlive-dvips during build</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1488888000">- Update to version 3.3.3:
  * Lots of changes. See
    http://eigen.tuxfamily.org/index.php?title=ChangeLog#Eigen_3.3.3
    for details.
- Added new build requirements libboost_headers-devel for
  Tumbleweed and boost-devel for openSUSE &lt;= 13.2.
- Rebased 0001-Disable-Altivec-for-ppc64le.patch and
  0001-Do-stack-allignment-on-ppc.patch to apply cleanly.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 3.3.4:
  General:
  * Improve speed of Jacobi rotation when mixing complex and real
    types.
  * Bug 1405: enable StrictlyLower/StrictlyUpper triangularView as
    the destination of matrix*matrix products.
  * UmfPack support: enable changes in the control settings and add
    report functions.
  * Bug 1423: fix LSCG's Jacobi preconditioner for row-major
    matrices.
  * Bug 1424: fix compilation issue with abs and unsigned integers
    as scalar type.
  * Bug 1410: fix lvalue propagation of Array/Matrix-Wrapper with a
    const nested expression.
  * Bug 1403: fix several implicit scalar type conversion making
    SVD decompositions compatible with ceres::Jet.
  * Fix some real-to-scalar-to-real useless conversions in
    ColPivHouseholderQR.
  Regressions:
  * Fix dense * sparse-selfadjoint-view product.
  * Bug 1417: make LinSpace compatible with std::complex.
  * Bug 1400: fix stableNorm alignment issue with
    EIGEN_DONT_ALIGN_STATICALLY.
  * Bug 1411: fix alignment issue in Quaternion.
  * Fix compilation of operations between nested Arrays.
  * Bug 1435: fix aliasing issue in expressions like: A = C - B*A.
  Others:
  * Fix compilation with gcc 4.3 and ARM NEON.
  * Fix prefetches on ARM64 and ARM32.
  * Fix out-of-bounds check in COLAMD.
  * Few minor fixes regarding nvcc/CUDA support, including bug
    1396.
  * Improve cmake scripts for Pastix and BLAS detection.
  * Bug 1401: fix compilation of "cond ? x : -x" with x an
    AutoDiffScalar
  * Fix compilation of matrix log with Map as input.
  * Add specializations of std::numeric_limits for Eigen::half and
    and AutoDiffScalar
  * Fix compilation of streaming nested Array, i.e.,
    cout &lt;&lt; Array&lt;Array&lt;&gt;&gt;</changelog>
  <changelog author="cfeck@kde.org" date="1500379200">- Split documentation into its own -doc package due to size.</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Use right RPM group.</changelog>
  <changelog author="alarrosa@suse.com" date="1510056000">- Remove libqt4 from BuildRequires since it's actually only required
  by some demos and tests which are simply not built when it's not
  available (except on Leap, where libqt4 is required)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1570881600">- Added eigen3-3.3.1-fixcmake.patch (Fix double {prefix} as we use
  INCLUDE_INSTALL_DIR with {_includedir}. Fixes boo#1148642.</changelog>
</package>
<package pkgid="32ed27f31570522cde169d892a12d8c89fbf371cd3db6a21b42e38f8229336e0" name="elfutils" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b001feea2137533c046383b8fc5cf2e7bdc071bfa7ee4c08e8958f1db3ace3b3" name="elfutils" arch="src">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c9ea7f85e047502e2484292239fc33552e71f53758aaf79720e3a41cd0fa413e" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c4fee0b9a6599939d6407c4895badb49cdef3db771645daeb87aac1b82500076" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="2ff118e024feedb8d8d03c3faef3d5042525bdc4518f4b2de5786e03a61f5b65" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="be84284d6f28f3079f1c7899840544e83273d720ffc91a244bf21cf3d597d6ae" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="011e76b7fd2c3a51cb19ee967b35778e3c4cde878ad626214a8e19de52a7e193" name="enigmail" arch="src">
  <version epoch="0" ver="2.1.2" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="51015d363dbc69e449d442b99cf588e9867030ece5756265f185cba3888005b9" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="58cce9d0a32d24f01b52ad39b96dd4b81644fcd0e799d6c194910cdf7c3dbff6" name="epiphany" arch="src">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="01db430042f31a5fe5177dac37c136461bf3355d6e18d6f73573b2a3dff49901" name="epiphany" arch="x86_64">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="59c4c504497f7097ed49de9879720f454a1627718136f14f7aef21b6692d2216" name="epiphany-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="2bfbc714c581b2d460c529ee387e4a62c767c489a8dc98568bf24c16d35aa16f" name="epiphany-lang" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="d0b455c7a370725a1b28bf05e4cb654e9170f95d7a5e09b40cd12868b07c1667" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="78fc15f26f631f1f00ece0ebf8f471b2e52eb871af738bcce4d6ae06e585d495" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="f215c38b4d79c25cffbe50cda345bb35b9f15afc5dc4519fa3ce2e68e4cd4426" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="9c759495cbf8333760f1567974b09aab67aeade5978abe9fe91dbc8c4c8230b0" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="a1597bd8b2182d39be94a1d8262edbbcbe2b2c98e5c8f7b37dce8309724be90d" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="4f12619903194a93d07e641b0cdafe05c7d3787df8e5c5705a183fd60b1d8624" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="aa10beab1a84b07af0a4c56380d1cbd02bc82c8b37c0d74084366339b77be387" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="285206c09c0ce57624d62b84f7d69e6333c7d2118765c572e852dc8498aaf1a5" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="db365e4518dc888b78fed9642ca5a2fa39f5e0d079520a0d6a56de320d0702b5" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="f5561b90136c5c1249180cf84e75e9aff6cf70e750b19db46c8e2fdb4a076ef3" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="bbe71be91a279962e64f5c750ff0c8dc40f8881918f6fe28d7f5a66a009de6a5" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="af7e0351c925f5a91557e4da2d2186e7bf7624958531a0289f631b06c3580f35" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="c178a5c38c5ca42418a2d8d2628e5ad1f591c5495d39bd341dc706dfe3a18ae0" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="837303b026d97205e6784f75beb23643c9552035b819893e0b4ba18299dceac7" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="47eb414c66afaae382dcb3b0889b2afe1fc8e6d84eadb8eef38fe12214aa67b8" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="3ab5874169c6154a7cdb4e4a3d23e5f369c92d026ee954eabaecb0395bf9a9f9" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="bc5244be8b0eda471f75aa360c4e4c3aa67068c78a5084af76a92dcb0bd7baca" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="77794eaac9ff3d5190f0cc779614b950fe7a398700ea1cc2a012e02d957734b7" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="57dbceee4e0cc6b1042d108c0f1ac5cea182544ad3ad0f1b4cf9eeaa632e6aa2" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="e5f73b987d0089e70bca4da7d3ea02b3f20db5d0a0c267827656f205719744db" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="8eef4a8e27bd88d3d801ca1e2fcc923a4bac85335328b670daa629399d97098b" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="082afb05f0107ff9d30238b020c08b2e6ec2487950b2820e14d3e7f936d8767a" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="23dd2a82ba96ddf77afb13752109350d00fdd461ba7db9856e0f5022aa38d98e" name="evolution" arch="src">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="3f99ee876d30643890bbcb3a636dd47b8b77b9b92e9462a0f3e982f5146ebfcf" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="22072846526ad326755547efb5353aed3521a5e6660093ab9609ef9e20bef2c7" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="7d84e48ecc06f48cac395bef96a24c47844ea23561fb29db75490a4cf6d4f21c" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="c71397fb4c471f06f1f41da41f140713e403dc10bb01269d0967411049fda5e9" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="eaa6b4c5315be7bba1f998cd48ed83562613204df996470e99474f4f4eea6dcf" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="aab2f9a3311c7ed9bae54260ddc07509e609bfa138e4a8a709c0fd6f16b54a9e" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="2967959b2bb4c10e6c34676ae8d8eb7e21f15364cf8aec4864b9117b13bdade5" name="exempi" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="e1c88b812e972c57ab2f8da32f53748da82c39c9b1869009658357734cc4c112" name="exempi-tools" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="ddd718469a72f0f427f08bbc58dcec820911522f2ae87d5483e0478b1296b604" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="795a82f1413489cfccb1ac444f619a54068545effd8ca390e9fce4a833313717" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="c8b2063b7d0fbf855d3ef9dabe039d0004c51e29753084d62041d35b31081cca" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="e2582c287282a4b572d5009487f96625b71881247da2761f60c0444ace78ca75" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="ca289b93895f8d839ffbd6bb2cf066352b43ceacbdccc45fc7e5baf2e7058f2b" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="e54410a42d68336ddc5780346610619194a54f6cf16b285fabf785a57a3a0b80" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="e6961f7831423d018e9b298f706c36d15d2533f3de31944d0fd3fc1257364c71" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="b61e3b572821ab0bb70a56756bfceeff46861c38413b7dc2f9fb710eb63d435f" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="eb6138614b251f82fe3dc6e97f8d371deae0abeb89682b4309c3575dc414f7f5" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="b63e695687244d6d806486cc1ac843966990b75fb9d1c6cab804e215247b082a" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="f74cd9ed7d4051871f4a1c06be8211e1a1d16f112532384014df57665e7259c6" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="2bb16f17936c6aa9476b4f1aa61e2a23380365e3bf9549bcc166104f7bc3fbcb" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="d09719596f3840d53e077344e1889ef346821d440f2b0b347e7b830d113495aa" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="bccb91dffe0aaec0383b7965d8beac09527873a4efe3183f1e353203d52613e9" name="expat" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1eff234dae4e2e82d19af00ea4dea1936206f737ce7ea1573d82613d63750aea" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="5c835a1cfba21788fac7d7f292fcb3beb1c6f0bc41e6fc0aea447f08cc4a2861" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1117669582319dc3a49c52df89ad50bdb74076f59bcf172b715172d4df60ad79" name="expat" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="095f060114d0a0dab086eb047bdea44e64b06387b1db5df257179436750c917d" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="3b8ef85803f58d7147285e4196bf5a3457601779dcb508af6480bab54d9472ba" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="6f22dba83af8a1095fb72e686e3fd174ea97611ff045953a05c75e72afa1ddf7" name="fcitx-qt5" arch="i586">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="e98dd112cf25f27a3ea03e59a50b5e3f71a008c736fba44d56d872bb581754c6" name="fcitx-qt5" arch="src">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="i@marguerite.su" date="1334664000">- initial version 0.1.0</changelog>
  <changelog author="i@marguerite.su" date="1362312000">- update version 0.1.1
  * fix build and add libfcitx-qt5 for dbus.
- fix Qt5 dependency name from KDE:Qt50 repository.
- add baselibs.conf
  * because there're 32bit applications that needs input method
  * so we have to provide a 32bit input module too</changelog>
  <changelog author="i@marguerite.su" date="1402315200">- update version 0.1.2
  * Fix github issue fcitx/fcitx-qt5#2</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Fix baselibs requires, and shlib find-requires works
  also with baselibs</changelog>
  <changelog author="i@marguerite.su" date="1410782400">- add baselibs.conf to Source</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="83050e609e550274e8fed4e33073a774c20143564f98a18102dbc07c21334ccc" name="fcitx-qt5" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="2a891343e4d2310fdbc9cfabb6517ac4763c5fa2456cd9e7ec5f2f5ad3a924eb" name="fcitx-qt5-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="e21215e181ca6188b4d2c4b5e2c30a20ca1203e97b854fb82cd308c6854a958e" name="fcitx-qt5-devel" arch="i586">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="81f2083764fe8d0a3fe8559cce23982ab4edc49df1b62bcba4583dd8e49e51a6" name="fcitx-qt5-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp151.4.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418385600">- fcitx-qt5 is using private QPA API, which can, and does break BC
  even in point releases, so we need to hardcode libQt5Gui5 version</changelog>
  <changelog author="i@marguerite.su" date="1427976000">- update version 1.0.1
  * small fix against 1.0.0
- changes from 0.1.3 to 1.0.0
  * add COPYING
  * use platform name to check x11
  * access window function when context destructs is a bad thing
  * reorganize fcitx-qt5 library
- changes from 0.1.2 to 0.1.3
  * remove debug message
  * fix fcitx-qt5 display number resolution
  * fix pkg-config file
  * use filterEvent instead of x11FilterEvent
  * update dbus support
  * use new qt5 library name</changelog>
  <changelog author="i@marguerite.su" date="1432987200">- update version 1.0.2
  * fix google code issue 748
  * fix dependency check
  * fix leak
  * use xkbcommon for compose
  * install to lib instead of data</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- update version 1.0.3
  * fix build w/ qt 5.5</changelog>
  <changelog author="i@marguerite.su" date="1441022400">- update version 1.0.4
  * fix the coordinates for high dpi in qt5</changelog>
  <changelog author="i@marguerite.su" date="1450872000">- update version 1.0.5
  * implement locale in platform context
  * use link_directories for widgetaddons
  * use the correct var name
  * use some c++11 featues and fix ic not get recreated when
    fcitx restarts
  * clean proxy even it's invalid</changelog>
  <changelog author="i@marguerite.su" date="1480766400">- update version 1.0.6
  * [qt5]fix inconsistency between qstring and ucs4 string
    when handle surrounding
  * [qt5]fromUcs4 expect a null terminated string by default,
    give it a size
  * [qt5]use new connection syntax
  * [qt5]use more nullptr
  * [qt5]remove usage of QPointer in icdata
  * [qt5]don't crash if window-&gt;screen() is null</changelog>
  <changelog author="i@marguerite.su" date="1486814400">- update version 1.1.0
  * added guiwrapper for fcitx-qt5
  * fix build and add support for webengine</changelog>
  <changelog author="i@marguerite.su" date="1512216000">- update version 1.2.1
  * fix issue #27 and #28
  * Add relative rect support
- changes in version 1.2.0
  * Relicense platforminputcontext/ to BSD
  * do the real unwatch
  * prefer to recheck the availability after original service gone
  * set display type for fcitx5
  * add fcitx 5 format support
  * Adapt changes in fcitx5-qt to fix commitPreedit.
  * implement compatibility layer for fcitx5
  * try to reimplement im module with lgpl free code
  * make sure that quickphrae editor does not compile with qt4 header
  * move quickphrase editor to fcitx-qt5
- changes in version 1.1.1
  * fix high dpi screen position, only happen when you have two
    high dpi screen
  * use new cmake for package config
  * enforce cmake 3.1
  * handle the missing password flag
  * QInputMethod::update shouldn't be used by input method,
    just do query
  * workaround some qquickwidget bug</changelog>
  <changelog author="opensuse@trummer.xyz" date="1518264000">- update version 1.2.2
  * We already changed reset of code to use "isRelease" for
    filterEventFallback. This check should be changed accordingly.</changelog>
  <changelog author="lbeltrame@kde.org" date="1524916800">- Add upstream patch fix-compilation-with-qt-5.11.patch:
  * Fix compilation with Qt 5.11 (missing include)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1569844800">- Add upstream patch fix-remove-paths-warnings.patch
  * QOwnNotes always crash at close with fcitx-qt5 installed(boo#1152412)
- Change COPYING from %doc to %license</changelog>
</package>
<package pkgid="3c0f9aaf345391a43dd2a85966e65d006e71c0fb34bb1552c49be975d2e60c12" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="8536e354aa599cef9a7bcf6a8874e30e502f27fbebb87401565146c817aeb696" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="3bf4bc513d7b0cc289902c287a45a2fad5b58b66f01dfc414d3b9f944d8c6e74" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="07b85993f7dd0a9c11d3e81d0ea06969c0cf33841851d70ac2f155fc2145fc8f" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="e27130394fd3637af696ea29f6f016d79fffd8039ccb0e237bafb6d57291773b" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="76eb0b81339a0b1a61e96a3c5edefa413f981180147d5cf4cbbdad5d7b85d256" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="8f231dc8cbcd35f531d5fd5b4f511c2ab19b9d17ed88c832997454211724273e" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="a949c1739b22d3f41bf00d5b76363c2a69e8e876399c3993aa569f2d678a6e12" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
</package>
<package pkgid="954d09a9e0917744b0adb6d6d34dddd7b207c78bafa2e35cedba3849a161e206" name="fipscheck" arch="i586">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="1164c0b4fbb91164f55e7a43038351a46e6ee2ae4beceb169811b1a35de9443a" name="fipscheck" arch="src">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="fac429f4e25f821530e05e0a52943843dc17a3d74fb85074e8ea2b8aa4ce91b2" name="fipscheck" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="2641a78bcf950078e43a05425e07af8f974350a79b1470fa2f8036e4394a7b3c" name="fipscheck-devel" arch="i586">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="a62b3d79bcd2714cd1f0302ff08fb38e935c464aae9ca35b1b80ab93aa78d56d" name="fipscheck-devel" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="930714ff4e3bd555d8ab124f39b6b8bd69632a64d064403df0178a02986ec815" name="firefox-esr-branding-openSUSE" arch="src">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
  <changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
  <changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
  <changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
  <changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
  <changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="b05de7fea8eb477063f0d2455512ae620f95307c3f7cd3ab584b0e7e8dde780f" name="firefox-esr-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="68" rel="lp151.3.3.1"/>
  <changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>
  <changelog author="wr@rosenauer.org" date="1445256000">- change homepage to https://www.opensuse.org/searchPage/
  (boo#950948, boo#950949)</changelog>
  <changelog author="wr@rosenauer.org" date="1450440000">- identify Tumbleweed correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Identify the different Leap versions correctly (up to Leap 42.2)
  (boo#987969).</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1481284800">- Fix openSUSE bookmarks not added to default profile (boo#1014292)
  * Move openSUSE bookmarks from toolbar to menu
  * Use local favicon for all bookmarks (Firefox 45+)
  * Fix links to "openSUSE Documentation" and "How to Participate"
    (boo#704121, boo#953164)
- Remove DuckDuckGo search plugin (included upstream)
- Clean up spec file
  * Change $RPM_BUILD_ROOT to %{buildroot}
  * Remove %clean section
  * Escape % symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1493380800">- recognize Leap 42.3 (boo#1036679)</changelog>
  <changelog author="wr@rosenauer.org" date="1496664000">- really fix boo#1036679 (recognize Leap 42.3)</changelog>
  <changelog author="wr@rosenauer.org" date="1522584000">- recognize Leap 15.0 (boo#1087713)</changelog>
  <changelog author="wr@rosenauer.org" date="1535198400">- removed intl.locale.matchOS
  * it's not used in recent versions and it was set in the general
    openSUSE Firefox package since 2011</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1556020800">- bump version to 60 for SLE compatibility (bsc#1128316)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- recognize Leap 15 via sle_version (required for &gt;= 15.1)</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
</package>
<package pkgid="1f07deb92b77951356e71d18d74058bcf1c815a94520c142876b6cf3a6b95862" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp151.5.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="171bd04d0d89b4825c1610a8976074bc22e45a51f2dc89a2366e2dad77ee1fbd" name="firewalld-rpcbind-helper" arch="src">
  <version epoch="0" ver="0.1" rel="lp151.5.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="db0b9ef9351ab489e8d27bc64c8653ff963d987649795b3bb4983804caef7573" name="fish3" arch="src">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="04bacee13a92bba315e901be35485c310bfc7bb1feb381f4a87db55759485a24" name="fish3" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="f91a1b73e37e2e37f017f0cf35e358e694698f19741dde539ff537a218938d29" name="fish3-devel" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp151.2.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
</package>
<package pkgid="97fc50bb695e881b26d785394ffa77ac2c8b425ab9d41f03641eff02c0562340" name="fping" arch="src">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="lrupp@suse.de" date="1202472000">- convert the Changelog to Unix
- add COPYING, remove INSTALL from docudir
- use macros
- build parallel</changelog>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="59863b4d31fcd729e47bfc15419c3542cb87f4df5f781d31f760b2cb4ce9b19b" name="fping" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="5010c05809f89867cb320763aa7caf478ea0b274e242f61baf75ea747b2b0a2e" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="1b792d4b3eddeb9d218641f2d883b0e164a7b18ec3e6cbb35cc8831bc581f02d" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="8fa37f0875c3d690a148a4ba34e704435acedda4bb2f72bb9896edf66cb66b72" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="835f3cfa9b5ab15075105b3fdb537e838074f0bc0e50bdbe880b2a642cd48f92" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="395f4c99da2285a76c23348045518467b8fe848eb35c5bd04fd5d763b30b78b9" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="839001027800accc4482de52f04c053ee1efbfcd62f9f80f3d08b9edbbfcdf00" name="fuse-overlayfs" arch="src">
  <version epoch="0" ver="0.4.1" rel="lp151.2.1"/>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
</package>
<package pkgid="c6a919abea52d232b324da477ab6e7b96ee01a51649b7af35d4c4752b670beca" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="lp151.2.1"/>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
</package>
<package pkgid="06c2f3ca2633d746a75a2da71eca07cc933e7ae80828e2044c74285f8f22491f" name="fuse3" arch="src">
  <version epoch="0" ver="3.6.1" rel="lp151.2.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="1a32045cc68d2fcade9b945d8137ac0f9c521d936005faf6d9200b25b7f45983" name="fuse3" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.2.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="c6a7c6616fd629f84238a415a907d9b1adabf6f5ecba7f72bd53add4fe888ae1" name="fuse3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.2.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="5f1ee68604e72b44e09018345f3c39a4eac9714578507afce7c4f2a6b4167d7a" name="fuse3-doc" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.2.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="f903aea54bfebd3c0becfa6a264c819d32b758e956fb1d55bd7f31439a033f76" name="fwupdate" arch="src">
  <version epoch="0" ver="12" rel="lp151.4.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="8da399e5bd465edc5f62d413b0425e52d85712cdc83ab0b36b1a670434846381" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="12" rel="lp151.4.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="67f90c490c216eb85afefedd7c2e76535ad903e6a8b8ac6c9067345df86c38a9" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="12" rel="lp151.4.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="3a7b100749144f65d04d7e319eaa1f96c7cc0f7922b8bc2274b8f2c0c1063aa5" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="12" rel="lp151.4.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="e18d64690510a3a0c7af656a3cea3273470bdba3a1a0472a777fc57463342b05" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="9b16e54926bea630afdb2e430216595342cf3e7693802dddecb62a206b0fc08c" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e6a221014cfd9047f74f0b788f86d140dbfa21f755195d6d3374109b1d423151" name="gcc7" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="159214e534ba09a1c0fef35ec7bc9ac499514e17ba18813a7e2c9574b4c02f9f" name="gcc7" arch="src">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="4b9ed4644f11e98d60e66c297c0fd025f57b94189522ba853cbbfd57d8c54712" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="b63a2765487dafbb3019eca4a3948d647c2d3449bd0f9250b7594825496dcc3f" name="gcc7" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="10929c79aeb9d79e7a4af0d51b97af7e4c4d6186a5cb2f2c45439ecf7acf830b" name="gcc7" arch="src">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="798a1c2b15557baa999420dfa8e569352d0aff9b4319f21f322dc0c8e356d7e0" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="bad3be7f15e514fe2da94b32bf1ab58e1ce77523ec6005335cb240cf32a5e2cc" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="4b9d9d9c628dcafa6ef3dfe61326a3ff9c75d257d07c3666d2636c634a1287eb" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="816cc069bcde294e4e33abf99df967cb9a5a21f21389190fe493c0f741fda8d9" name="gcc7-ada" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="e0ca613a6ad973a049bd4fda00a4e30479c2f9414abf50503889154bd42296cf" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="568a7c2674344f403d3f96c03a720ea2b507aa170a6d6bbcc04980079865ed4f" name="gcc7-ada" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="1afbac2d84f64bf98c275d27b72933201cc0ec56eb5821afc7a3ba0676496654" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="a5364b65715bc616d0804fbcc60e048f5f28d2c6e704675a2389baa774aeeb54" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="c62282599a0edddbfd7087c7e6b2a84bb1b4512dc1b3f2121e4ca974ffdba3eb" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="5c155822fbbd285baea93df36257f2b1f2053c5c1ab1c6c8053657660089ae7c" name="gcc7-c++" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="829c1ccba9f1a5fa2c8f037c479d72c85803b52107227923b965363c135c5a17" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="28629aec1c70946612d5e81fd9fb787a988de7f5b1d6650ce9d6695359e979d2" name="gcc7-c++" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="a300056ed29c37d40d102132f4ad70014123a528d6e0810ceae83ab8d8a8eb59" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ae707ca0bd51bbb0055403ea7d959116565a2f282970b5ebe693a292ad46d68b" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="0169669bc6d178c26f5f4bb6a0c7652de37a33983e4b76380105405e885c02fa" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="575d343b368c6238c5af269dc0f4ddd19c1ff8c4bef464d57b006a52269971d8" name="gcc7-fortran" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="bde5372363fc95dca7f703f4e955763d9ec9b40584f25b7a0c2ca69635cff8b7" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="109ac3f4818440d368a968e5e7f9e1031c530e3f424b3b68237aed89085d9226" name="gcc7-fortran" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="51070205b6cc6701f2ce84d17995649ae5063a0fb9eaca5e7d42f9ee57de79d1" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="af298a0afa8c9494bd5c88f4055f092ed4a6b6c40f417be908cd71a20069b08d" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="2fc23a7163f3d9cabe4c108b8c54c57426a783c730c3aa0f2ae7114e697d5a7c" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e1c16969586721813a824a671ebb879455dadf66405755693353d43238a95b25" name="gcc7-go" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="2eefe3f63b9cc58af19dd8d67a96a062843dc93b428266270e16e915817b135e" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="98a22103c02a1d2931cfd8ee21a75c0e5c086fb810611f3bb3153e721034c70a" name="gcc7-go" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="52e778ed4d4994df50d7170078fc9d23842bf6cac352db0f1ce43d0e33e1c1a3" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="8fa1c43de56043d9fcaa816e1577910dc54a3f424c6701b6a6685faaf087f8ab" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="d18bec46965d1277fe6a541a5d0869cb6ba6125849dee7f022eaaadf6142a940" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ed11c47e7a3e92d437d4f5c7c672288d07b63e05841ff79528ba9919b4a5c0f4" name="gcc7-locale" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="ec0dae3bfce340baded6c693a92975716b8c3bdf73ff7937bb680af62ad6f20f" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="a66ccaf1c5abd3eac106e564a7985e9235aa81f6a1a09a71e0337f0208e9a163" name="gcc7-locale" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="c4298b0406404c88b0cb00f21ee2926806cfaf32bfb23acf9fc4b19e2a698d7c" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="74d4220896232c005bce5c2d20b0d56f6d64dc0e62965b1e2e34042394bdd5f9" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="9b4a9cb1794fbb4c5b0c3f12307a18fc17d19223bf93f8a46ea6acefde5a657f" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="22f19132a1a13858b19ecf675535fadefdf59f1543b10f7f7c937bfc445ea281" name="gcc7-obj-c++" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="3189cfe1da7a6ddf8fb3f467b2f19a9195fdd26928857bf171dd11f1b74adfe1" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="bdbfd4380656ba822244da7916bb0cc33410ce17ffc3a655256af766513f602e" name="gcc7-obj-c++" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="b3a03cb4a22244033e1092a40ef610c98cc55b871ed5dbbf57cee73ac1c4fc66" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="6ca5258a759d6f12dbe5b7d11ce60c7b6627f2e0f1b71f4754960fff82593506" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="df6c03da21e11f2213f948f8e4395ca21ed457b1dd8347b936b7c54af4c9a114" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="8145a16a259c9eb8702818cafd03789198f3cc3d92fe0f1e8a7a77e6bbe2318d" name="gcc7-objc" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="adbe9c8bb88128e02547742262aab4a035a7ddb80cf2ba2192e6d0206f022926" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="8c737721172661030fa3e08ba693b925fa5743b470132719a4740b78120e0991" name="gcc7-objc" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="396b3160db3c6110dd73033cb3839957efc276d17923a19495388e15d3073d7c" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e541b9c954526d796d940538baa9848a7d82876e8791f2fcf75a87ecc16b0923" name="gd" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="12b248b041366d1da9f71458f24e5e407c643ad3870e682fd46153e4296a5459" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="28489cd8e5248ea9338b1543ba9a3208af21236b7035d6ac31cdf89dc3fae1d0" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="1090897552113b51b7b0e569f5f9cd0af323cc3d97b744ed781b389de0a37cae" name="gd-devel" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="fbb6394a90d6b3ae8e05562f87db77824d2d2c4c70edfb702dfd7fab745e8379" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="5d62ba2ad8b96734aa752b143dec223108221f69dfec985e330ed47a7d98cea5" name="gdal" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp151.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1521720000">- Update to new upstream bugfix release 2.2.4
  See details https://trac.osgeo.org/gdal/wiki/Release/2.2.4-News
- Remove merged patch gdal-json-c-0.13.patch
- Maximize usage of pkgconfig</changelog>
  <changelog author="bruno@ioda-net.ch" date="1522929600">- Fix boo#1088014 by adding missing LICENSE in lib and main package
  Remove misplaced LICENSE.txt in /usr/share/gdal</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525694400">- Add optional support to ECW5 JPEG lib support disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526299200">- Upgrade to new 2.3.0 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Source code is now hosted on github
  + RFC 70: Guessing output format from output file name extension
    for utilities
    https://trac.osgeo.org/gdal/wiki/rfc70_output_format_guess
  + RFC 68: C++11 Compilation requirement
    https://trac.osgeo.org/gdal/wiki/rfc68_cplusplus11
    GDAL now requires a C++11 compatible compiler. External code
    using GDAL C++ API will also need to enable at least C++11
    compilation mode, if the compiler defaults to C++98/C++03.
  + Stricter const-ness in OGRGeomFieldDefn, OGRFeatureDefn and
    OGRFeature classes, impacting out-of-tree drivers that subclass
    them.
- Packaging : redone patches against new version
  + GDALmake.opt.in.patch
  + gdal-libproj.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1527854400">- require libopenjp2 for devel package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Add optional filegdb_api support, disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1530878400">- Upgrade to new bugfix 2.3.1 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Fix build with recent Poppler (0.64) (#573)
  + PDF driver: fix build against PDFium (#612)
  + Do not use json-c private API RDA and AmigoCloud? drivers(#618)
  + fix build against MySQL 8.0
  + Include gdalsse_priv.h from user defined paths
  + Unix:
  - update GRASS drivers to support GRASS 7.4.0 (#633)
  - configure: use CXXFLAGS when CXX is used (#693)
- Packaging : redone patches against new version
  + gdal-perl.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1531224000">- Enable KEA support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531828800">- Add patch to fix ECW5 detection in configure:
  * gdal-fix_ecw5_detection.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532692800">- Fix FileGDB support</changelog>
  <changelog author="bruno@ioda-net.ch" date="1533038400">- Remove patch gdal-libproj.patch, we can't have hardcoded libproj
  soversion. Replaced by dynamic sed formula.
  Fix boo#1102889</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1538222400">- Update to new bugfix 2.3.2 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.2-News
  This adds 65 bug fixes on top of 2.3.1.
  The C and C++ API and ABI are unchanged.
- Packaging:
  + spec-cleaner -m -i URL and Requires order changes
  + Remove patch gdal-fix_ecw5_detection.patch (merged upstream)
  + Redone patch GDALmake.opt.in.patch with version 2.3.2</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Update to 2.3.3: Bugfix
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.3-News</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652801">- Update to 2.4.0:
  * In a nutshell:
  - New GDAL drivers:
    ?BYN: read/write support for Natural Resources Canada's Geoid binary format
    ?EEDAI: read-only driver for Google Earth Engine Data API
    IGNFHeightASCIIGrid: read-only driver to read IGN-France height correction ASCII grids
    ?NGW: NextGIS Web read-only driver
    NTv1: read-only driver for NTv1 datum shift grids
  - New OGR drivers:
    ?EEDA: read-only driver for Google Earth Engine Data API
    ?GeoJSONSeq: read/creation support of new-line or record-separator separated GeoJSON features (#378)
    ?NGW: NextGIS Web read-write driver
  - Improved drivers:
    BAG: add read support for variable-resolution grids, and write support for single-resolution grids
    GTiff driver: add Lerc and WebP codecs
    PostgisRaster?: add support for out-db rasters
    RMF
    MSSQLSpatial
  - RFC 72: Make GDAL Python autotest suite use pytest framework
  - Add /vsihdfs/ virtual file system handler for Hadoop File System (via libhdfs)
  - Add /vsiwebhdfs/ read-write virtual file system for Web Hadoop File System REST API
  - gdal_contour rewriting: speed optimizations and capability to compute polygon isosurfaces.
  - Remove PHP and Ruby bindings.
  - Continued code linting in C++, Python scripts, Shell scripts and autotest
  * Backward compatibility issues
  - The value of COMPRESSION_ZSTD used for ZStd-in-TIFF compression has been changed.
    ZStd-compressed TIFF files produced by GDAL 2.3.0 will not be readable
  * Full changelog: https://trac.osgeo.org/gdal/wiki/Release/2.4.0-News
- Add md5 checksum
- Refresh patch:
  * gdal-perl.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1548849600">- Add upstream patches to fix build with the latest poppler in
  Tumbleweed:
  * Poppler-revision-version-management.patch
  * add-support-for-poppler-0.72.0-and-0.73.0.patch</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1550923200">- Use the Python package name 'GDAL' as used by upstream</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551960000">- Fix boo#1128276 by providing correct Obsolete</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1554379200">- Update to version 2.4.1 (52 bugfix release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.1-News
- Packaging:
  + Remove merged upstream patch
    add-support-for-poppler-0.72.0-and-0.73.0.patch
    Poppler-revision-version-management.patch
  + Add pkg-config-libpq.patch upstream issue#1412 pr#1418 wip
    use pkg-config for libpq
  + Secure libproj detection with tail -n1</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554984000">- Fix build with fgdb_support option enabled</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1572868800">- Update to version 2.4.3 (bugfix &amp; security release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.3-News
  Fix CVE-2019-17545 boo#1153918</changelog>
</package>
<package pkgid="4740a0d835ace952542ffc7467cd65335d3b46ce143a362e66bccec4156aa58b" name="gdal" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp151.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1521720000">- Update to new upstream bugfix release 2.2.4
  See details https://trac.osgeo.org/gdal/wiki/Release/2.2.4-News
- Remove merged patch gdal-json-c-0.13.patch
- Maximize usage of pkgconfig</changelog>
  <changelog author="bruno@ioda-net.ch" date="1522929600">- Fix boo#1088014 by adding missing LICENSE in lib and main package
  Remove misplaced LICENSE.txt in /usr/share/gdal</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525694400">- Add optional support to ECW5 JPEG lib support disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526299200">- Upgrade to new 2.3.0 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Source code is now hosted on github
  + RFC 70: Guessing output format from output file name extension
    for utilities
    https://trac.osgeo.org/gdal/wiki/rfc70_output_format_guess
  + RFC 68: C++11 Compilation requirement
    https://trac.osgeo.org/gdal/wiki/rfc68_cplusplus11
    GDAL now requires a C++11 compatible compiler. External code
    using GDAL C++ API will also need to enable at least C++11
    compilation mode, if the compiler defaults to C++98/C++03.
  + Stricter const-ness in OGRGeomFieldDefn, OGRFeatureDefn and
    OGRFeature classes, impacting out-of-tree drivers that subclass
    them.
- Packaging : redone patches against new version
  + GDALmake.opt.in.patch
  + gdal-libproj.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1527854400">- require libopenjp2 for devel package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Add optional filegdb_api support, disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1530878400">- Upgrade to new bugfix 2.3.1 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Fix build with recent Poppler (0.64) (#573)
  + PDF driver: fix build against PDFium (#612)
  + Do not use json-c private API RDA and AmigoCloud? drivers(#618)
  + fix build against MySQL 8.0
  + Include gdalsse_priv.h from user defined paths
  + Unix:
  - update GRASS drivers to support GRASS 7.4.0 (#633)
  - configure: use CXXFLAGS when CXX is used (#693)
- Packaging : redone patches against new version
  + gdal-perl.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1531224000">- Enable KEA support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531828800">- Add patch to fix ECW5 detection in configure:
  * gdal-fix_ecw5_detection.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532692800">- Fix FileGDB support</changelog>
  <changelog author="bruno@ioda-net.ch" date="1533038400">- Remove patch gdal-libproj.patch, we can't have hardcoded libproj
  soversion. Replaced by dynamic sed formula.
  Fix boo#1102889</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1538222400">- Update to new bugfix 2.3.2 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.2-News
  This adds 65 bug fixes on top of 2.3.1.
  The C and C++ API and ABI are unchanged.
- Packaging:
  + spec-cleaner -m -i URL and Requires order changes
  + Remove patch gdal-fix_ecw5_detection.patch (merged upstream)
  + Redone patch GDALmake.opt.in.patch with version 2.3.2</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Update to 2.3.3: Bugfix
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.3-News</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652801">- Update to 2.4.0:
  * In a nutshell:
  - New GDAL drivers:
    ?BYN: read/write support for Natural Resources Canada's Geoid binary format
    ?EEDAI: read-only driver for Google Earth Engine Data API
    IGNFHeightASCIIGrid: read-only driver to read IGN-France height correction ASCII grids
    ?NGW: NextGIS Web read-only driver
    NTv1: read-only driver for NTv1 datum shift grids
  - New OGR drivers:
    ?EEDA: read-only driver for Google Earth Engine Data API
    ?GeoJSONSeq: read/creation support of new-line or record-separator separated GeoJSON features (#378)
    ?NGW: NextGIS Web read-write driver
  - Improved drivers:
    BAG: add read support for variable-resolution grids, and write support for single-resolution grids
    GTiff driver: add Lerc and WebP codecs
    PostgisRaster?: add support for out-db rasters
    RMF
    MSSQLSpatial
  - RFC 72: Make GDAL Python autotest suite use pytest framework
  - Add /vsihdfs/ virtual file system handler for Hadoop File System (via libhdfs)
  - Add /vsiwebhdfs/ read-write virtual file system for Web Hadoop File System REST API
  - gdal_contour rewriting: speed optimizations and capability to compute polygon isosurfaces.
  - Remove PHP and Ruby bindings.
  - Continued code linting in C++, Python scripts, Shell scripts and autotest
  * Backward compatibility issues
  - The value of COMPRESSION_ZSTD used for ZStd-in-TIFF compression has been changed.
    ZStd-compressed TIFF files produced by GDAL 2.3.0 will not be readable
  * Full changelog: https://trac.osgeo.org/gdal/wiki/Release/2.4.0-News
- Add md5 checksum
- Refresh patch:
  * gdal-perl.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1548849600">- Add upstream patches to fix build with the latest poppler in
  Tumbleweed:
  * Poppler-revision-version-management.patch
  * add-support-for-poppler-0.72.0-and-0.73.0.patch</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1550923200">- Use the Python package name 'GDAL' as used by upstream</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551960000">- Fix boo#1128276 by providing correct Obsolete</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1554379200">- Update to version 2.4.1 (52 bugfix release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.1-News
- Packaging:
  + Remove merged upstream patch
    add-support-for-poppler-0.72.0-and-0.73.0.patch
    Poppler-revision-version-management.patch
  + Add pkg-config-libpq.patch upstream issue#1412 pr#1418 wip
    use pkg-config for libpq
  + Secure libproj detection with tail -n1</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554984000">- Fix build with fgdb_support option enabled</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1572868800">- Update to version 2.4.3 (bugfix &amp; security release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.3-News
  Fix CVE-2019-17545 boo#1153918</changelog>
</package>
<package pkgid="3c98a4f84a52c24a489a2fff949cc6b311e2a0bb8153383f9b189b2db7491d85" name="gdal-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp151.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1521720000">- Update to new upstream bugfix release 2.2.4
  See details https://trac.osgeo.org/gdal/wiki/Release/2.2.4-News
- Remove merged patch gdal-json-c-0.13.patch
- Maximize usage of pkgconfig</changelog>
  <changelog author="bruno@ioda-net.ch" date="1522929600">- Fix boo#1088014 by adding missing LICENSE in lib and main package
  Remove misplaced LICENSE.txt in /usr/share/gdal</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525694400">- Add optional support to ECW5 JPEG lib support disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526299200">- Upgrade to new 2.3.0 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Source code is now hosted on github
  + RFC 70: Guessing output format from output file name extension
    for utilities
    https://trac.osgeo.org/gdal/wiki/rfc70_output_format_guess
  + RFC 68: C++11 Compilation requirement
    https://trac.osgeo.org/gdal/wiki/rfc68_cplusplus11
    GDAL now requires a C++11 compatible compiler. External code
    using GDAL C++ API will also need to enable at least C++11
    compilation mode, if the compiler defaults to C++98/C++03.
  + Stricter const-ness in OGRGeomFieldDefn, OGRFeatureDefn and
    OGRFeature classes, impacting out-of-tree drivers that subclass
    them.
- Packaging : redone patches against new version
  + GDALmake.opt.in.patch
  + gdal-libproj.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1527854400">- require libopenjp2 for devel package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Add optional filegdb_api support, disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1530878400">- Upgrade to new bugfix 2.3.1 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Fix build with recent Poppler (0.64) (#573)
  + PDF driver: fix build against PDFium (#612)
  + Do not use json-c private API RDA and AmigoCloud? drivers(#618)
  + fix build against MySQL 8.0
  + Include gdalsse_priv.h from user defined paths
  + Unix:
  - update GRASS drivers to support GRASS 7.4.0 (#633)
  - configure: use CXXFLAGS when CXX is used (#693)
- Packaging : redone patches against new version
  + gdal-perl.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1531224000">- Enable KEA support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531828800">- Add patch to fix ECW5 detection in configure:
  * gdal-fix_ecw5_detection.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532692800">- Fix FileGDB support</changelog>
  <changelog author="bruno@ioda-net.ch" date="1533038400">- Remove patch gdal-libproj.patch, we can't have hardcoded libproj
  soversion. Replaced by dynamic sed formula.
  Fix boo#1102889</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1538222400">- Update to new bugfix 2.3.2 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.2-News
  This adds 65 bug fixes on top of 2.3.1.
  The C and C++ API and ABI are unchanged.
- Packaging:
  + spec-cleaner -m -i URL and Requires order changes
  + Remove patch gdal-fix_ecw5_detection.patch (merged upstream)
  + Redone patch GDALmake.opt.in.patch with version 2.3.2</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Update to 2.3.3: Bugfix
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.3-News</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652801">- Update to 2.4.0:
  * In a nutshell:
  - New GDAL drivers:
    ?BYN: read/write support for Natural Resources Canada's Geoid binary format
    ?EEDAI: read-only driver for Google Earth Engine Data API
    IGNFHeightASCIIGrid: read-only driver to read IGN-France height correction ASCII grids
    ?NGW: NextGIS Web read-only driver
    NTv1: read-only driver for NTv1 datum shift grids
  - New OGR drivers:
    ?EEDA: read-only driver for Google Earth Engine Data API
    ?GeoJSONSeq: read/creation support of new-line or record-separator separated GeoJSON features (#378)
    ?NGW: NextGIS Web read-write driver
  - Improved drivers:
    BAG: add read support for variable-resolution grids, and write support for single-resolution grids
    GTiff driver: add Lerc and WebP codecs
    PostgisRaster?: add support for out-db rasters
    RMF
    MSSQLSpatial
  - RFC 72: Make GDAL Python autotest suite use pytest framework
  - Add /vsihdfs/ virtual file system handler for Hadoop File System (via libhdfs)
  - Add /vsiwebhdfs/ read-write virtual file system for Web Hadoop File System REST API
  - gdal_contour rewriting: speed optimizations and capability to compute polygon isosurfaces.
  - Remove PHP and Ruby bindings.
  - Continued code linting in C++, Python scripts, Shell scripts and autotest
  * Backward compatibility issues
  - The value of COMPRESSION_ZSTD used for ZStd-in-TIFF compression has been changed.
    ZStd-compressed TIFF files produced by GDAL 2.3.0 will not be readable
  * Full changelog: https://trac.osgeo.org/gdal/wiki/Release/2.4.0-News
- Add md5 checksum
- Refresh patch:
  * gdal-perl.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1548849600">- Add upstream patches to fix build with the latest poppler in
  Tumbleweed:
  * Poppler-revision-version-management.patch
  * add-support-for-poppler-0.72.0-and-0.73.0.patch</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1550923200">- Use the Python package name 'GDAL' as used by upstream</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551960000">- Fix boo#1128276 by providing correct Obsolete</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1554379200">- Update to version 2.4.1 (52 bugfix release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.1-News
- Packaging:
  + Remove merged upstream patch
    add-support-for-poppler-0.72.0-and-0.73.0.patch
    Poppler-revision-version-management.patch
  + Add pkg-config-libpq.patch upstream issue#1412 pr#1418 wip
    use pkg-config for libpq
  + Secure libproj detection with tail -n1</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554984000">- Fix build with fgdb_support option enabled</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1572868800">- Update to version 2.4.3 (bugfix &amp; security release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.3-News
  Fix CVE-2019-17545 boo#1153918</changelog>
</package>
<package pkgid="38be807beb285ec30d378ce5192cef22b48a037b71cf0d89f25c87c27ec27d1f" name="gdb" arch="src">
  <version epoch="0" ver="8.3.1" rel="lp151.4.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155200">- Add comment explaining why guile support has been disabled for
  newer distro versions.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155201">- Add BuildRequire fpc for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155202">- Add missing %endif</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155203">- Drop ppc64le for fpc</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155204">- Copy %ada_arch from gcc9 and use it to fix 'unresolvable: nothing
  provides gcc-ada' for openSUSE_Leap_42.3_Ports/SLE-12 ppc64le.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155205">- Move BuildRequires gcc-go and fpc to %{with testsuite} portion</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155206">- Add BuildRequires valgrind for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1563796800">- Add Wno-error=odr to work around swo#24835
- Add BuildRequires xz-devel</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564056000">- Remove some conditionals for SLE-10 (build is disabled/unresolvable).
- BuildRequire makeinfo instead of full texinfo (requiring texlive)
  where available (SLE &gt;= 12).</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1565092800">- Master backport:
  * gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
- Master backports testsuite:
  * gdb-testsuite-i386-pkru-exp.patch
  * gdb-testsuite-read1-fixes.patch
  * gdb-testsuite-pie-no-pie.patch
  * gdb-testsuite-add-missing-initial-prompt-read-in-multidictionary.exp.patch
- Work around bsc#1115034:
  * gdb-testsuite-ada-pie.patch
- Fixes for fedora patches:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1566561600">- Enable librpm for version &gt; librpm.so.3 [bsc#1145692]:
  * Allow any librpm.so.x
  * Fix unused variables in HAVE_LIBRPM code in
    gdb-6.6-buildid-locate-rpm-suse.patch
  * Add %build test to check for "zypper install &lt;rpm-packagename&gt;"
    message
- Implements jsc#ECO-368, the 2019 toolchain module update</changelog>
  <changelog author="matz@suse.com" date="1568116800">- Disable use of valgrind on old s390 (31bit) distros.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568462400">- Add _constraints for PowerPC need more than 3.5GB disk space
  to avoid build failure</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569153600">- Use ldd /usr/bin/rpm instead of ls /usr/%{_lib}/ to find librpm</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569326400">- Sync with f30, merging 1e222a3..8bf40c6.
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569412800">- Upgrade libipt from v2.0 to v2.0.1.
  * Use -DBUILD_SHARED_LIBS=OFF to build libipt.a, and drop part
    of v1.5-libipt-static.patch that consequentially has become
    unnecessary.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569499200">- Drop ChangeLog part of patch:
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch
- Update to gdb-8.3.1.
  * Drop "Testsuite: Ensure pie is disabled on some tests" part of
    gdb-testsuite-pie-no-pie.patch
  * Drop patches included upstream:
  - gdb-7.10-swo18929.patch
  - gdb-handle-vfork-in-thread-with-follow-fork-mode-child.patch
  - gdb-x86_64-i386-syscall-restart-master.patch
  - gdb-suppress-sigttou-when-handling-errors.patch
  - gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
  - gdb-symtab-fix-symbol-loading-performance-regression.patch
- Fix macro in comment warning</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569844800">- Add gdb-testsuite-8.3-kfail-xfail-unsupported.patch</changelog>
  <changelog author="matz@suse.com" date="1571054400">- Add gdb-s390-handle-arch13.diff to handle most new s390 arch13
  instructions.  [fate#327369, jsc#ECO-368]</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1572350400">- Backport 2nd part of fix for swo#23657.
  [bsc#1142772, swo#23657, CVE-2019-1010180]
  * gdb-dwarf-reader-reject-sections-with-invalid-sizes.patch</changelog>
</package>
<package pkgid="2f62b71c86d828599260533ed57adbcfb20c65b5fbe03cd03ce83b83259ef99f" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.3.1" rel="lp151.4.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155200">- Add comment explaining why guile support has been disabled for
  newer distro versions.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155201">- Add BuildRequire fpc for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155202">- Add missing %endif</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155203">- Drop ppc64le for fpc</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155204">- Copy %ada_arch from gcc9 and use it to fix 'unresolvable: nothing
  provides gcc-ada' for openSUSE_Leap_42.3_Ports/SLE-12 ppc64le.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155205">- Move BuildRequires gcc-go and fpc to %{with testsuite} portion</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155206">- Add BuildRequires valgrind for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1563796800">- Add Wno-error=odr to work around swo#24835
- Add BuildRequires xz-devel</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564056000">- Remove some conditionals for SLE-10 (build is disabled/unresolvable).
- BuildRequire makeinfo instead of full texinfo (requiring texlive)
  where available (SLE &gt;= 12).</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1565092800">- Master backport:
  * gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
- Master backports testsuite:
  * gdb-testsuite-i386-pkru-exp.patch
  * gdb-testsuite-read1-fixes.patch
  * gdb-testsuite-pie-no-pie.patch
  * gdb-testsuite-add-missing-initial-prompt-read-in-multidictionary.exp.patch
- Work around bsc#1115034:
  * gdb-testsuite-ada-pie.patch
- Fixes for fedora patches:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1566561600">- Enable librpm for version &gt; librpm.so.3 [bsc#1145692]:
  * Allow any librpm.so.x
  * Fix unused variables in HAVE_LIBRPM code in
    gdb-6.6-buildid-locate-rpm-suse.patch
  * Add %build test to check for "zypper install &lt;rpm-packagename&gt;"
    message
- Implements jsc#ECO-368, the 2019 toolchain module update</changelog>
  <changelog author="matz@suse.com" date="1568116800">- Disable use of valgrind on old s390 (31bit) distros.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568462400">- Add _constraints for PowerPC need more than 3.5GB disk space
  to avoid build failure</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569153600">- Use ldd /usr/bin/rpm instead of ls /usr/%{_lib}/ to find librpm</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569326400">- Sync with f30, merging 1e222a3..8bf40c6.
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569412800">- Upgrade libipt from v2.0 to v2.0.1.
  * Use -DBUILD_SHARED_LIBS=OFF to build libipt.a, and drop part
    of v1.5-libipt-static.patch that consequentially has become
    unnecessary.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569499200">- Drop ChangeLog part of patch:
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch
- Update to gdb-8.3.1.
  * Drop "Testsuite: Ensure pie is disabled on some tests" part of
    gdb-testsuite-pie-no-pie.patch
  * Drop patches included upstream:
  - gdb-7.10-swo18929.patch
  - gdb-handle-vfork-in-thread-with-follow-fork-mode-child.patch
  - gdb-x86_64-i386-syscall-restart-master.patch
  - gdb-suppress-sigttou-when-handling-errors.patch
  - gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
  - gdb-symtab-fix-symbol-loading-performance-regression.patch
- Fix macro in comment warning</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569844800">- Add gdb-testsuite-8.3-kfail-xfail-unsupported.patch</changelog>
  <changelog author="matz@suse.com" date="1571054400">- Add gdb-s390-handle-arch13.diff to handle most new s390 arch13
  instructions.  [fate#327369, jsc#ECO-368]</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1572350400">- Backport 2nd part of fix for swo#23657.
  [bsc#1142772, swo#23657, CVE-2019-1010180]
  * gdb-dwarf-reader-reject-sections-with-invalid-sizes.patch</changelog>
</package>
<package pkgid="cc247d1cf8c7e3ec7b3880d440215dacfc33618e19257937135a4f1d000beaf4" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.3.1" rel="lp151.4.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155200">- Add comment explaining why guile support has been disabled for
  newer distro versions.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155201">- Add BuildRequire fpc for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155202">- Add missing %endif</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155203">- Drop ppc64le for fpc</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155204">- Copy %ada_arch from gcc9 and use it to fix 'unresolvable: nothing
  provides gcc-ada' for openSUSE_Leap_42.3_Ports/SLE-12 ppc64le.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155205">- Move BuildRequires gcc-go and fpc to %{with testsuite} portion</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155206">- Add BuildRequires valgrind for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1563796800">- Add Wno-error=odr to work around swo#24835
- Add BuildRequires xz-devel</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564056000">- Remove some conditionals for SLE-10 (build is disabled/unresolvable).
- BuildRequire makeinfo instead of full texinfo (requiring texlive)
  where available (SLE &gt;= 12).</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1565092800">- Master backport:
  * gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
- Master backports testsuite:
  * gdb-testsuite-i386-pkru-exp.patch
  * gdb-testsuite-read1-fixes.patch
  * gdb-testsuite-pie-no-pie.patch
  * gdb-testsuite-add-missing-initial-prompt-read-in-multidictionary.exp.patch
- Work around bsc#1115034:
  * gdb-testsuite-ada-pie.patch
- Fixes for fedora patches:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1566561600">- Enable librpm for version &gt; librpm.so.3 [bsc#1145692]:
  * Allow any librpm.so.x
  * Fix unused variables in HAVE_LIBRPM code in
    gdb-6.6-buildid-locate-rpm-suse.patch
  * Add %build test to check for "zypper install &lt;rpm-packagename&gt;"
    message
- Implements jsc#ECO-368, the 2019 toolchain module update</changelog>
  <changelog author="matz@suse.com" date="1568116800">- Disable use of valgrind on old s390 (31bit) distros.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568462400">- Add _constraints for PowerPC need more than 3.5GB disk space
  to avoid build failure</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569153600">- Use ldd /usr/bin/rpm instead of ls /usr/%{_lib}/ to find librpm</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569326400">- Sync with f30, merging 1e222a3..8bf40c6.
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569412800">- Upgrade libipt from v2.0 to v2.0.1.
  * Use -DBUILD_SHARED_LIBS=OFF to build libipt.a, and drop part
    of v1.5-libipt-static.patch that consequentially has become
    unnecessary.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569499200">- Drop ChangeLog part of patch:
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch
- Update to gdb-8.3.1.
  * Drop "Testsuite: Ensure pie is disabled on some tests" part of
    gdb-testsuite-pie-no-pie.patch
  * Drop patches included upstream:
  - gdb-7.10-swo18929.patch
  - gdb-handle-vfork-in-thread-with-follow-fork-mode-child.patch
  - gdb-x86_64-i386-syscall-restart-master.patch
  - gdb-suppress-sigttou-when-handling-errors.patch
  - gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
  - gdb-symtab-fix-symbol-loading-performance-regression.patch
- Fix macro in comment warning</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569844800">- Add gdb-testsuite-8.3-kfail-xfail-unsupported.patch</changelog>
  <changelog author="matz@suse.com" date="1571054400">- Add gdb-s390-handle-arch13.diff to handle most new s390 arch13
  instructions.  [fate#327369, jsc#ECO-368]</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1572350400">- Backport 2nd part of fix for swo#23657.
  [bsc#1142772, swo#23657, CVE-2019-1010180]
  * gdb-dwarf-reader-reject-sections-with-invalid-sizes.patch</changelog>
</package>
<package pkgid="d084655f41732af10e197331471d0d834b73baa951b647068acc17eafd5c8e2f" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.3.1" rel="lp151.4.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155200">- Add comment explaining why guile support has been disabled for
  newer distro versions.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155201">- Add BuildRequire fpc for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155202">- Add missing %endif</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155203">- Drop ppc64le for fpc</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155204">- Copy %ada_arch from gcc9 and use it to fix 'unresolvable: nothing
  provides gcc-ada' for openSUSE_Leap_42.3_Ports/SLE-12 ppc64le.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155205">- Move BuildRequires gcc-go and fpc to %{with testsuite} portion</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1562155206">- Add BuildRequires valgrind for make check</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1563796800">- Add Wno-error=odr to work around swo#24835
- Add BuildRequires xz-devel</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564056000">- Remove some conditionals for SLE-10 (build is disabled/unresolvable).
- BuildRequire makeinfo instead of full texinfo (requiring texlive)
  where available (SLE &gt;= 12).</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.de&gt;" date="1565092800">- Master backport:
  * gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
- Master backports testsuite:
  * gdb-testsuite-i386-pkru-exp.patch
  * gdb-testsuite-read1-fixes.patch
  * gdb-testsuite-pie-no-pie.patch
  * gdb-testsuite-add-missing-initial-prompt-read-in-multidictionary.exp.patch
- Work around bsc#1115034:
  * gdb-testsuite-ada-pie.patch
- Fixes for fedora patches:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1566561600">- Enable librpm for version &gt; librpm.so.3 [bsc#1145692]:
  * Allow any librpm.so.x
  * Fix unused variables in HAVE_LIBRPM code in
    gdb-6.6-buildid-locate-rpm-suse.patch
  * Add %build test to check for "zypper install &lt;rpm-packagename&gt;"
    message
- Implements jsc#ECO-368, the 2019 toolchain module update</changelog>
  <changelog author="matz@suse.com" date="1568116800">- Disable use of valgrind on old s390 (31bit) distros.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568462400">- Add _constraints for PowerPC need more than 3.5GB disk space
  to avoid build failure</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569153600">- Use ldd /usr/bin/rpm instead of ls /usr/%{_lib}/ to find librpm</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569326400">- Sync with f30, merging 1e222a3..8bf40c6.
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569412800">- Upgrade libipt from v2.0 to v2.0.1.
  * Use -DBUILD_SHARED_LIBS=OFF to build libipt.a, and drop part
    of v1.5-libipt-static.patch that consequentially has become
    unnecessary.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569499200">- Drop ChangeLog part of patch:
  * gdb-rhbz1708192-parse_macro_definition-crash.patch
  * gdb-rhbz1704406-disable-style-log-output-1of3.patch
  * gdb-rhbz1704406-disable-style-log-output-2of3.patch
  * gdb-rhbz1704406-disable-style-log-output-3of3.patch
  * gdb-rhbz1723564-gdb-crash-PYTHONMALLOC-debug.patch
  * gdb-rhbz1553086-binutils-warning-loadable-section-outside-elf.patch
- Update to gdb-8.3.1.
  * Drop "Testsuite: Ensure pie is disabled on some tests" part of
    gdb-testsuite-pie-no-pie.patch
  * Drop patches included upstream:
  - gdb-7.10-swo18929.patch
  - gdb-handle-vfork-in-thread-with-follow-fork-mode-child.patch
  - gdb-x86_64-i386-syscall-restart-master.patch
  - gdb-suppress-sigttou-when-handling-errors.patch
  - gdb-fix-breakpoints-on-file-reloads-for-pie-binaries.patch
  - gdb-symtab-fix-symbol-loading-performance-regression.patch
- Fix macro in comment warning</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1569844800">- Add gdb-testsuite-8.3-kfail-xfail-unsupported.patch</changelog>
  <changelog author="matz@suse.com" date="1571054400">- Add gdb-s390-handle-arch13.diff to handle most new s390 arch13
  instructions.  [fate#327369, jsc#ECO-368]</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1572350400">- Backport 2nd part of fix for swo#23657.
  [bsc#1142772, swo#23657, CVE-2019-1010180]
  * gdb-dwarf-reader-reject-sections-with-invalid-sizes.patch</changelog>
</package>
<package pkgid="de3d211cfa6cd463a4c6f8d335342682bf41ffcfb509fa6f46d9c72b94a1f09c" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="c5885293709df48af92336e83c980100f757dbad1ecbedb004e8d4fc23feed6e" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="3ba11ce9427a790af97c3651310f1fa5c1f498fc0f12b821d79431172d7a1631" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="c1671cda05bdc54db5003780a0843dd455f250072df82c2218db16d29092149c" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="2dfc335768a87448de5f1442d433700059d6ec9c63cdfc9fa6c42b1e12f7d266" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="4bf9e05bcb60abb4cf8c7bb3cf2c08235c3e6295e77286380f7ad1cb3536f349" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="4aa108d06ba8f8c0985a8a5bc25d5b47ca0fa1ffc5c735be7dddc5c4de82a37b" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="a1f7b3e6ed4adaa00acf481bd084ae00f890ebfb39fb313087808132f5c3bceb" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="ddf94ff17a32df05633ce8bff369a1fad654e67843d47f93bd4cc026a2f4d2e4" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="8177e0eb59feb51c8f3b1b8908d3892974e2716c66b99efb4b4dc55e4f35b2b6" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="dfc6fb8f8c101cc76a4f8fff2760975b96cbaf69f483cde00b6ec5a8fb3d438e" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="da64bf1bc8ff0e592cf129c02c7f01207098a8b881fedd9f71bc6d69b8000885" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="636f49ca2154136bd76ab0df9134011044939f1ab392755a8c39c6a860e52385" name="gettext-its-gtk3" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9ff04fa1cd2185521e8739d5e181b7dff0c4fdad4fe6794f59d6ae4bf3133bbc" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="b8b038454def2c0442c50a382504cf70c2e1bf3b2fc6111837e583fcad5ab6dc" name="gettext-its-gtk3" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="8548c1d34bb3dce59ecdb4b7b5ae293eb9fbf4cd1080b1369f52973e16aaa88c" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="8a9c820cbb79edba59cb52b80dc5456c1a82392e4895a615fb133aa62f79cf24" name="ghostscript" arch="i586">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="b71b310cb198cbddf9e86e5fdf52d4225165af091ef6bfc15087425e39b007c6" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="a075303fe44cb352cb77b70a5845018022d3a2a8ba5a6a7adb55c34bd18d9491" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="15a8e03147c20192e2ed2ccb13d0661345fb45abbd923ae54dd6112728b61cf0" name="ghostscript" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="231c28768b429b819985846b90c4da178324ef6830afc761318bbe9ffd141e2f" name="ghostscript" arch="src">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="4a6f5ab2f1d0f7d82764c4ed474db2d5d2150e119cf8883450ef93af39a3f7b8" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="710d93e989607ea8846267ff4ff8ac4186dad6c3e721ddac40e07aa5c7e6fd51" name="ghostscript" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="c7601b080563f6ad28693614784cb52f7321067b56a918bd88a856867c265379" name="ghostscript" arch="src">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="69633505e18cb8ff47ab0dc9cb02078a32c39f6c0f8684a1e2fd8e27f420a603" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="6ddf2724aa47a2a8473c1015e640a11a7801ee6b32168980660630f8cd65c9be" name="ghostscript-devel" arch="i586">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="6d567c9d80aaaf2e960eda1ab7f0047fa363bc7da6220dce0653ae145a4dbe08" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="a3f15078dac5c92e3b31bca81624127b36d28e5eb116089f909188e362ed209a" name="ghostscript-devel" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="c3b03cb5e6efd9e5db1b9da0cf0e0afc6e85bd39436832b192b8c63c7d2078ff" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="cd2aec195c24389175ba581c21e2a33eabc98eaa0aea42f08ad222111433941f" name="ghostscript-devel" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="feac4fb0413516dc1a5370e04383e9667a577d4b610f3f2c23ba264aad35087d" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="ea4d48cb354d023dc483f93d40c63fdd15c22fbe73aed11421de86fffdec1091" name="ghostscript-mini" arch="i586">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="ad86b180e680615252d6b5c36fc0abec83aac3ec3bd4dfc790e837d95a10bd46" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="c24066bda3fcb3b181acae20a2daeef897394c78006eab9f3ed4f2d1f17461fa" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="3e5990061b56106cb7c39adad5718152615a209aee21885c24eee8aadf28633d" name="ghostscript-mini" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="5045875a0fda701172f3e9165acab1de9141ad5323f30a745d018f16ede764e0" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="01d2b50729c64916df15a0df093e1c7939104a9faf2e1f2b13640d4ed5c66d6c" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="2c27e079353f3db0bc370ecf551fa705d7f06af04881711164f9e2b6f34b219c" name="ghostscript-mini" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="99de8007f3c3df5f88df79e6e512c044c1127076ad69f537afa2db4bf5d19949" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="98ecc488ba84ca6e949d93cd5843c0fe8f587fa2d0081b1834c2f7b903886f0d" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="ed846059d84a59e33e8a79d94ad2798bd44c4a64cd304a4ea2f1eb2d56dda3a5" name="ghostscript-mini-devel" arch="i586">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="58069b89c772db86131cec05d46394c827ed0c95ccc2bcfcd287d50121cbc3e6" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="9da62ea5f42d69ee38014d33baaf486853bc309d65d8b9a7e069023cccd51c55" name="ghostscript-mini-devel" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="79930c4a29a7289c3bca485572103b98014941e8762e3681b25c762265e0ca3f" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="06e6e95e6a34af7bcff62a8843812c7b7796d07350d7cc91f72234854d54b80b" name="ghostscript-mini-devel" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="eb571c49f711f8b90fe8489808d2e7c61e68d39da3ae63148aef350d7145dfdb" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="b805dfa5211f1f767879ddbe623af8245acfad8295cf60b251e8e556c278d568" name="ghostscript-x11" arch="i586">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="f30d044cf0e6ea065428471973cf384f52a3c19c7cf049d5e5d5ce836c0d5791" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp151.3.3.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="5ed5e70b142b181510c699c6b03122a6d35fdb4cf74e988c139a58121d227f92" name="ghostscript-x11" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="52d02b230a87b44a8e6bd29b9ed40f91f821f6a39cf39cc3dfea814bf3055430" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.6.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="c4bb613393089bebfcbee2a3f1be9022d8b098c6d4ecf482ed3c6e49079f7718" name="ghostscript-x11" arch="i586">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="c351001156d37469bbf1195b661ffc05358dd0088e259a01e78a910e3a54d533" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp151.3.9.1"/>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
</package>
<package pkgid="4df90f1fb89c123af6117d0d3c122dec62badf9b8f5068186810a761b6b547e8" name="git-review" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="lp151.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1400760000">- update to 1.23.61:
  * Topic: do not use '(detached' when detached
  * Use gerrit 2.8.5 instead of gerrit 2.6.1 in tests
  * Allow to specify default scheme in .gitreview file
  * Correct test_remote to support branchs without upstream
  * Remove parsing of --help and variants from our code
  * Python2: fixed UnicodeEncodeError
  * Skip invalid unicode in commit messages
  * Git review assumes the wrong ssh default port
  * Add http(s) protocol support to fetch_review and list_reviews
  * git-review.1 manpage fix for groff warnings
  * Fix parsing of SCP-style URLs, as these are valid in Git itself
  * "git review --setup" failed in Chinese locale
  * Bump hacking version in requirements
  * Reduce testr concurrnecy to 2
  * Add http(s) protocol support to set_hooks_commit_msg
  * Retrieve remote pushurl independently of user's locale
  * Add http(s) protocol support to test_remote
  * Verify if every attached file exists. Attach gerrig.config
  * Wrap exceptions that occur while running external process
  * Make Gerrit port and dir selection deterministic
  * Don't try to attach known_hosts if it's not there
  * Remove tox locale overrides
  * Fix the regex for setting topic
  * Add 2m timeout to tests
  * Attach Gerrit logs and known_hosts to failed tests
  * Change test gerrit ssh/http ports offset
  * Correct .Fl typo WRT --compare in the manual page
  * Ignore content of merge commits in reporting
  * Remove empty lines from git log output
  * Preserve merges when doing a rebase
  * Split git rev-parse --show-toplevel --git-dir on newline
  * Prefer .gitconfig username
  * Add more deterministic port selection for Gerrit
  * Document source location as git.openstack.org
  * Implement integration tests
  * Migrate to pbr
  * No longer check for new git-review releases
- remove git-review-username.diff: merged upstream</changelog>
  <changelog author="speilicke@suse.com" date="1404475200">- Avoid source Url, we're packaging from git</changelog>
  <changelog author="bwiedemann@suse.com" date="1405512000">- update to 1.24
  * Require python-requests
  * Update homepage on PyPI
  * Update requirements to OpenStack's recommendations
  * Update the README to mention dependencies
  * Ensure username is set for all tests
  * Provide nicer user message for missing remote ref
  * Fix a typo in HACKING.rst
  * Ignore newline in bp/bug search in commit message
  * Restrict tests SSH auth to only the provided key
  * Disable proxies for tests that clone over http
  * Keep track of gerrit.war and golden_site versions
  * Fix typo in manpage s/gireview/gitreview/
  * Correct git review -l over http(s)</changelog>
  <changelog author="bwiedemann@suse.com" date="1411387200">- Require python-setuptools to fix CLI</changelog>
  <changelog author="tbechtold@suse.com" date="1434196800">- update to 1.25.0:
  * Add ?git-review -l? to man page synopsis and usage doc
  * Add reviewers on upload
  * Update project links
  * Override E-mail in Gerrit integration tests
  * Fixed a dead link to the git-review docs
  * Provide an explanation on failed rebase
  * Switch to requests to support proxying of 'https'
  * Use plumbing rev-parse to get the branch name
  * Isolate tests from user/system git configuration
  * Push language override down into the cmd wrapper
  * git review -sv gets more verbose
  * Add utf-8 char support
  * Choose tracked branch for rebase when submitting
  * pbr should install the manpage
  * get_remote_url(): also honor url.*.pushInsteadOf
  * Support authentication in run_http_exc
  * Split README.rst into separate doc files
  * Handle correctly http error raise in run_http_exc
  * Fix encoding header
  * Workflow documentation is now in infra-manual
  * Update tests to use Gerrit 2.9.2
  * Use 'no_proxy' env variable in addition to uppercase
  * Enable color support based on tty and config
  * get_remote_url(): honor any "url.&lt;base&gt;.insteadOf" config setting
  * Convert add_remote to use GitReviewExceptions
  * Prefer git-config over git-review config files
  * Isolate tests from user/system config
  * Switched documentation to point to storyboard
  * Fix ---list and "departement" typos in man page
  * Align git-review and python -m git_review.cmd behaviors
  * Define -T/--no-topic to disable review submit with topic
  * Work toward Python 3.4 support and testing
  * -F/--force-rebase has no effect if rebase is disabled by config
  * Remove useless constants
  * Improve windows support for git-review --setup
  * Fix groff warnings with manpage
  * Enabled hacking checks H305 and H307
  * Prevent long subjects in reviews causing spurious blank lines
  * added link to get-pip to readme
  * Disable ssh/scp password authentication during tests
  * Update tests to use Gerrit 2.8.6.1
  * Build universal wheels</changelog>
  <changelog author="tbechtold@suse.com" date="1440676800">- Remove %{_sysconfdir}/git-review/git-review.conf from package.
  File is deprecated.</changelog>
  <changelog author="dmueller@suse.com" date="1510574400">- add git-2.15-compat.patch: fix compat with git 2.15</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546948800">- Update to 1.27.0:
  * Work with python3
- Remove patch in upstream: git-2.15-compat.patch
- Switch to source url downloads
- Switch URL to point to active site
- Switch to singlespec</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884800">- update to 1.28.0 (bsc#1134089):
  * Support for auto-configuration of topic names based on the
  presence of keywords in the commit message is removed. Previously,
  keywords such as bug, bp or lp followed by a number would result
  in branch names containing the associated number, e.g. bug/123.
  This feature was OpenStack specific, was a frequent source of bugs
  and clearly wasn?t being used that often, given that StoryBoard
  is a thing now and no one had updated this feature to handle that metadata.
  * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884801">- revert switch to singlespec. This is an insane complexification
  for no gain: git-review is a pure cli tool, not a module
  to import, and we never had a working python2- version anyway
  because all the tooling was excluded from packaging. So
  don't create packages that are unusable and deprecated.</changelog>
</package>
<package pkgid="09e05edaf3ce1414e39f96abea0cddc9c5a00c34adc630e052dd8803a3bc9bb8" name="git-review" arch="src">
  <version epoch="0" ver="1.28.0" rel="lp151.3.3.1"/>
  <changelog author="saschpe@suse.de" date="1337860800">- Initial version</changelog>
  <changelog author="rhafer@suse.com" date="1348142400">- Update to 1.18:
  * Adds Python3 support and various bugfixes
- Package a default configuration file to disable the automatic check
  for new git-review releasess on PyPI. Otherwise git-review refuses
  to work when a new release is available on PyPI</changelog>
  <changelog author="saschpe@suse.de" date="1361966400">- Update to version 1.20:
  + Avoid symlinks in the manpage path
- Changes from version 1.19:
  + Allow download of reviews from deleted accounts
  + See https://github.com/openstack-infra/git-review/compare/1.18...1.19
- Renamed from python-git-review, it's a tool not a library
- Install man-page in correct location
- Explicit %py_requires, since we don't have files in %python_sitelib</changelog>
  <changelog author="vmiklos@suse.com" date="1370260800">- Update to version 1.22
- Changes from version 1.20:
  + Allows easy cherry-picking of a change
  + See https://github.com/openstack-infra/git-review/compare/1.20...1.22</changelog>
  <changelog author="aj@suse.com" date="1378900800">- Add patch git-review-username.diff to prefer .gitconfig username
  (see https://review.openstack.org/46015)
- Update to version 1.23:
    Expand multiple commit submission warning.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="dmueller@suse.com" date="1400760000">- update to 1.23.61:
  * Topic: do not use '(detached' when detached
  * Use gerrit 2.8.5 instead of gerrit 2.6.1 in tests
  * Allow to specify default scheme in .gitreview file
  * Correct test_remote to support branchs without upstream
  * Remove parsing of --help and variants from our code
  * Python2: fixed UnicodeEncodeError
  * Skip invalid unicode in commit messages
  * Git review assumes the wrong ssh default port
  * Add http(s) protocol support to fetch_review and list_reviews
  * git-review.1 manpage fix for groff warnings
  * Fix parsing of SCP-style URLs, as these are valid in Git itself
  * "git review --setup" failed in Chinese locale
  * Bump hacking version in requirements
  * Reduce testr concurrnecy to 2
  * Add http(s) protocol support to set_hooks_commit_msg
  * Retrieve remote pushurl independently of user's locale
  * Add http(s) protocol support to test_remote
  * Verify if every attached file exists. Attach gerrig.config
  * Wrap exceptions that occur while running external process
  * Make Gerrit port and dir selection deterministic
  * Don't try to attach known_hosts if it's not there
  * Remove tox locale overrides
  * Fix the regex for setting topic
  * Add 2m timeout to tests
  * Attach Gerrit logs and known_hosts to failed tests
  * Change test gerrit ssh/http ports offset
  * Correct .Fl typo WRT --compare in the manual page
  * Ignore content of merge commits in reporting
  * Remove empty lines from git log output
  * Preserve merges when doing a rebase
  * Split git rev-parse --show-toplevel --git-dir on newline
  * Prefer .gitconfig username
  * Add more deterministic port selection for Gerrit
  * Document source location as git.openstack.org
  * Implement integration tests
  * Migrate to pbr
  * No longer check for new git-review releases
- remove git-review-username.diff: merged upstream</changelog>
  <changelog author="speilicke@suse.com" date="1404475200">- Avoid source Url, we're packaging from git</changelog>
  <changelog author="bwiedemann@suse.com" date="1405512000">- update to 1.24
  * Require python-requests
  * Update homepage on PyPI
  * Update requirements to OpenStack's recommendations
  * Update the README to mention dependencies
  * Ensure username is set for all tests
  * Provide nicer user message for missing remote ref
  * Fix a typo in HACKING.rst
  * Ignore newline in bp/bug search in commit message
  * Restrict tests SSH auth to only the provided key
  * Disable proxies for tests that clone over http
  * Keep track of gerrit.war and golden_site versions
  * Fix typo in manpage s/gireview/gitreview/
  * Correct git review -l over http(s)</changelog>
  <changelog author="bwiedemann@suse.com" date="1411387200">- Require python-setuptools to fix CLI</changelog>
  <changelog author="tbechtold@suse.com" date="1434196800">- update to 1.25.0:
  * Add ?git-review -l? to man page synopsis and usage doc
  * Add reviewers on upload
  * Update project links
  * Override E-mail in Gerrit integration tests
  * Fixed a dead link to the git-review docs
  * Provide an explanation on failed rebase
  * Switch to requests to support proxying of 'https'
  * Use plumbing rev-parse to get the branch name
  * Isolate tests from user/system git configuration
  * Push language override down into the cmd wrapper
  * git review -sv gets more verbose
  * Add utf-8 char support
  * Choose tracked branch for rebase when submitting
  * pbr should install the manpage
  * get_remote_url(): also honor url.*.pushInsteadOf
  * Support authentication in run_http_exc
  * Split README.rst into separate doc files
  * Handle correctly http error raise in run_http_exc
  * Fix encoding header
  * Workflow documentation is now in infra-manual
  * Update tests to use Gerrit 2.9.2
  * Use 'no_proxy' env variable in addition to uppercase
  * Enable color support based on tty and config
  * get_remote_url(): honor any "url.&lt;base&gt;.insteadOf" config setting
  * Convert add_remote to use GitReviewExceptions
  * Prefer git-config over git-review config files
  * Isolate tests from user/system config
  * Switched documentation to point to storyboard
  * Fix ---list and "departement" typos in man page
  * Align git-review and python -m git_review.cmd behaviors
  * Define -T/--no-topic to disable review submit with topic
  * Work toward Python 3.4 support and testing
  * -F/--force-rebase has no effect if rebase is disabled by config
  * Remove useless constants
  * Improve windows support for git-review --setup
  * Fix groff warnings with manpage
  * Enabled hacking checks H305 and H307
  * Prevent long subjects in reviews causing spurious blank lines
  * added link to get-pip to readme
  * Disable ssh/scp password authentication during tests
  * Update tests to use Gerrit 2.8.6.1
  * Build universal wheels</changelog>
  <changelog author="tbechtold@suse.com" date="1440676800">- Remove %{_sysconfdir}/git-review/git-review.conf from package.
  File is deprecated.</changelog>
  <changelog author="dmueller@suse.com" date="1510574400">- add git-2.15-compat.patch: fix compat with git 2.15</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546948800">- Update to 1.27.0:
  * Work with python3
- Remove patch in upstream: git-2.15-compat.patch
- Switch to source url downloads
- Switch URL to point to active site
- Switch to singlespec</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884800">- update to 1.28.0 (bsc#1134089):
  * Support for auto-configuration of topic names based on the
  presence of keywords in the commit message is removed. Previously,
  keywords such as bug, bp or lp followed by a number would result
  in branch names containing the associated number, e.g. bug/123.
  This feature was OpenStack specific, was a frequent source of bugs
  and clearly wasn?t being used that often, given that StoryBoard
  is a thing now and no one had updated this feature to handle that metadata.
  * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884801">- revert switch to singlespec. This is an insane complexification
  for no gain: git-review is a pure cli tool, not a module
  to import, and we never had a working python2- version anyway
  because all the tooling was excluded from packaging. So
  don't create packages that are unusable and deprecated.</changelog>
</package>
<package pkgid="7cd1c2f80ec252a82e7d7374f796f2b5260fa7bbdc403b0396aa8cb44059d0ba" name="gitlint" arch="src">
  <version epoch="0" ver="0.11.0" rel="lp151.3.3.1"/>
  <changelog author="okurz@suse.com" date="1489060800">- Initial submission</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Install LICENSE as well
- Use update alternatives
- Drop parts of description which are not relevant to package</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562068800">- Update to v0.11.0
  * add relax-requirements.patch to make it work with openSUSE</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562241600">- Correct download target URL and fix relax-requirements.patch</changelog>
</package>
<package pkgid="670e01da47daaddbe11033d47d62ab5aa4f401495de3b62ed06446e578af6ba4" name="gjs" arch="i586">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="16be74254532b4e0736a5b56f852bbdbdfcdae09683fd4919c1c9ff6b0647c11" name="gjs" arch="src">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="fd826ebdbf7d5b3ac747bd8fda090bb2f95b4d0df0553bff1406aa404649442e" name="gjs" arch="x86_64">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="5c05aa3f33ee5acf0cc0f4f12b15d7bacb3833374a42df6f04d995b9b948c510" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="cb2d24bce9996698c3a031be72844273763f0b80ac9a96e795f11de8abc64e01" name="glib-networking" arch="i586">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="17a9cb4bee9352420567767d1a50217ef8911033b00c7010122dbf037bb28639" name="glib-networking" arch="src">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="051bef8b0965a26fb7551e62e2b72e8670c77596ace9150f2581f1dde565b97a" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="6a6cffc4c9f023efcb22d8a0d6b39e62568e5d17038fbe12b931b53693961bbc" name="glib-networking-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="fe1aba1e62f5ae3635acb0784de3891b4c0b3d36d697880b6f86a2212579ac9a" name="glib-networking-lang" arch="noarch">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="9849c2fccbb617e617403e7ac5df84caefd27c51a227ebbeeaa2bfe6b2cb4673" name="glm" arch="src">
  <version epoch="0" ver="0.9.7.5" rel="lp151.3.3.1"/>
  <changelog author="adam@mizerski.pl" date="1305374400">- new package</changelog>
  <changelog author="adam@mizerski.pl" date="1306411200">- update to 0.9.2.1
  - Automatically detect CUDA support
  - Improved compiler detection
  - Fixed errors and warnings in VC with C++ extensions disabled
  - Fixed and tested GLM_GTX_vector_angle
  - Fixed and tested GLM_GTX_rotate_vector</changelog>
  <changelog author="adam@mizerski.pl" date="1309176000">- update to 0.9.2.3
  - Fixed build issues
- update to 0.9.2.2
  - Expend matrix constructors flexibility
  - Improved quaternion implementation
  - Fixed many warnings across platforms and compilers</changelog>
  <changelog author="adam@mizerski.pl" date="1316174400">- update to 0.9.2.4
  - Fixed extensions bugs</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections</changelog>
  <changelog author="adam@mizerski.pl" date="1346760000">- update to 0.9.3.4
  - A lot happend since last update.
    Changelog available at http://glm.g-truc.net/</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="44688bbc277308a9a598031bfacb03f9f076c8a59258aaa51c2dfbe608c62186" name="glm-devel" arch="x86_64">
  <version epoch="0" ver="0.9.7.5" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="48170d38626ce03cf6312f881f1ea2021871cd663aa84c6daf671c9b126a8bef" name="glm-doc" arch="noarch">
  <version epoch="0" ver="0.9.7.5" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="ec68bc02b0497bce63453374c73038cc4efad0f8b7cfc5c528610522ec437376" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="4bbd692efba1fa9d88f67986463626bdb075923cb72f63aa487a3bd4bbf086f6" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="e59fd5f88c4904e460f9628fc3a645f4803b0fbcbb58b172d1890893c8ad1cea" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="8237899868595925e9685712f748dddc0a3806fe4a9557f392e3a4b0846da35c" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="8166322447e8de6247b28e00e4968d0733a56137c1a1ebcf0e4573bcf62b4aa3" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="26ee5582b0b0cf688ca36d66f648feb0c0e7fe747e8c1c2eb4f5d1461e3e27bf" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="2bf1e049014ad23e09d51ca8b777d28e29bc1d2fbe9380dd1aa7f558ad9e76ed" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="dee1bdea9f80de7d6f4899fa71a7cc92528fb5badb50a25e05d8babdef714048" name="gnome-music" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="9585df23ae903a66b9796ec719f7b08309412184c214fa5deeabf7c248b56946" name="gnome-music" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="bf4085145e6b848dccb5528a49d3793e1b0739459c988d8074df6d7913e460d1" name="gnome-music-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="4fa9abdfa87bbe1999334886e68b6f1ab40e4aa6332cab7bd5c8d5e57b5733c0" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="2bb9a73809696682f7d29525f2bb993c7b374eb92e4077237a0425b62e50f286" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="dc11df0095b2336e363763daa2c53c0700663027fa0589d3ac6a4dda8e60593b" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="80fa96b7c783c7e440e7e12c1baa0a5a0a33786ad6f4ea4e17363823f7037c57" name="gnome-settings-daemon-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="8ce116f88e141159a12b5d94edefde658f19b92de15f603660d9b2d3398c684b" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="fdff768d27477edcc71e1340a058bd1cdfd7b2bdb4efe4d62653dd1e9a107c97" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="766c605fc8d1eb59cb1df2ab3cebf8151899cda5f4df3ee7b23943f4330962f4" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="ea1547392d2625944d1a08abac771f1d36eac7d8b18e4ee21956fd2f92e7a41e" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="3a160d04dd4f0109cb714921e83ccc8c83fa5876b85c3981c53aca0a2ba55132" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="9d026d34d47b2d0687864a683eaea29dfce3208b6845561f742d346c907e2de8" name="gnome-shell-classic-session" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="7e4941fd9387f4c4ffb8546044a2436768b9bdd74d50e47d83c2da47f9e7badc" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="b02749035a366a54ef537f999404fabb1e91f07464c40a9f7eabb2d0b35dcd47" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="32b62264e0cdd5712e98afe93f8d44c6f4a7705eb03c7f3fa83cd3724fc4b62c" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="39cb55b054570b04d23be518dc51de577e8bd74b2e8153f07e9b754c427bb1aa" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="f7eb1ba4b91146d9b4fb86726ea251d7f45e73cdbc4ffc2e58fdadf671c6d323" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="8512a62a9e3ed39905beadea44e4087d8b091fd37186bbad4f2b150415ffc7f4" name="gnome-shell-search-provider-epiphany" arch="x86_64">
  <version epoch="0" ver="3.28.1.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="adb6ce0e604d6044666d0265393adab090c5a17190351d91f563d96f6286b560" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
</package>
<package pkgid="e4ca808a1069b85809e5b4abc6153bda75fea5b943599cf511b576f9213b4ec0" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.4.1" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
</package>
<package pkgid="a48e6fba1b7d68c80f171425e75c2cb824d688c187889e768fe7ecfa5e75434e" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- demo.diff to update installation script for demo-db added</changelog>
</package>
<package pkgid="90d39fdd2141a54a19bef129787658b898b48e39c841f027c7680d2fc523ba1e" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.4.1" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- demo.diff to update installation script for demo-db added</changelog>
</package>
<package pkgid="db93394301ed08c5df8f8175b4a93ae58b5aebfc4bde8142dfea48d378ff990f" name="gnuhealth-client" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Add emptly build phase to silence rpmlint
- Drop python-rsvg require, the code does not include it</changelog>
  <changelog author="axel.braun@gmx.de" date="1521201600">- Bugfix Release 3.2.6</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544529600">- New client for the GNU Health 3.4 series based on Tryton 4.6 series
  * Enhanced support for Calendar and WebDAV system
  * Native client has a command line interface
  * Over 30 new commands for the main daily tasks
  * Enhanced GNU Health camera plugin, including zoom
  * gnuhealth_crypto.patch replaced by plugin
  * Activity Log window on the client
  * SYSINFO command to retrieve the information about client and server
  * Customize the banner on the client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545998400">- version 3.4.2 with many bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
</package>
<package pkgid="2347c354e521f0f2a0bdecae585e499dff931e8af7d101f24250a0eec4642f20" name="gnuhealth-client" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Add emptly build phase to silence rpmlint
- Drop python-rsvg require, the code does not include it</changelog>
  <changelog author="axel.braun@gmx.de" date="1521201600">- Bugfix Release 3.2.6</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544529600">- New client for the GNU Health 3.4 series based on Tryton 4.6 series
  * Enhanced support for Calendar and WebDAV system
  * Native client has a command line interface
  * Over 30 new commands for the main daily tasks
  * Enhanced GNU Health camera plugin, including zoom
  * gnuhealth_crypto.patch replaced by plugin
  * Activity Log window on the client
  * SYSINFO command to retrieve the information about client and server
  * Customize the banner on the client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545998400">- version 3.4.2 with many bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
</package>
<package pkgid="4a79387285a08a42490f1d0888e3cb2f32afa00a7dcf5c49908d1b6faa2da0b9" name="gnuhealth-client" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Add emptly build phase to silence rpmlint
- Drop python-rsvg require, the code does not include it</changelog>
  <changelog author="axel.braun@gmx.de" date="1521201600">- Bugfix Release 3.2.6</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544529600">- New client for the GNU Health 3.4 series based on Tryton 4.6 series
  * Enhanced support for Calendar and WebDAV system
  * Native client has a command line interface
  * Over 30 new commands for the main daily tasks
  * Enhanced GNU Health camera plugin, including zoom
  * gnuhealth_crypto.patch replaced by plugin
  * Activity Log window on the client
  * SYSINFO command to retrieve the information about client and server
  * Customize the banner on the client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545998400">- version 3.4.2 with many bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- camera.diff added
  plugins changed from *latest* to version 3.4.x</changelog>
</package>
<package pkgid="e0f188d8a5178d47e243875fe1f47ea09abf3dccf85803e8ac2dffce4d71c532" name="gnuhealth-client" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1515153600">- GNU Health client - initial version 3.2.5</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Add emptly build phase to silence rpmlint
- Drop python-rsvg require, the code does not include it</changelog>
  <changelog author="axel.braun@gmx.de" date="1521201600">- Bugfix Release 3.2.6</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544529600">- New client for the GNU Health 3.4 series based on Tryton 4.6 series
  * Enhanced support for Calendar and WebDAV system
  * Native client has a command line interface
  * Over 30 new commands for the main daily tasks
  * Enhanced GNU Health camera plugin, including zoom
  * gnuhealth_crypto.patch replaced by plugin
  * Activity Log window on the client
  * SYSINFO command to retrieve the information about client and server
  * Customize the banner on the client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545998400">- version 3.4.2 with many bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1548590400">- Version 3.4.3
  * Fix bug #55458: Command line gets activated with shift Z
  * many bugfixes from tryton client</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1554206400">- link to python2-GooCalendar (remains python2) boo#1131096</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1555761600">- version 3.4.4 - Security fix boo#1131707</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- plugin_frl updated to version 3.4.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573473600">- camera.diff added
  plugins changed from *latest* to version 3.4.x</changelog>
</package>
<package pkgid="1ce766abfd027ba3b6fd82589be8734178ec21934b35b49bce48599057057d45" name="gnuhealth-thalamus" arch="noarch">
  <version epoch="0" ver="0.9.11" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1511611200">- Version 0.0.6
  initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1533816000">- Version 0.0.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- version 0.9.4
  various bugfixes and functional improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545048000">- version 0.9.5
  templates and static added to the tarball</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552046400">- Version 0.9.8
  rewrite to use PostgreSQL instad of mongoDB</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- version 0.9.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1568808000">- version 0.9.10 - various bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573992000">- version 0.9.11</changelog>
</package>
<package pkgid="5903434ba5430a1a8dd025cd414daa6854b7f5afc619f82fa231a18d4d17994b" name="gnuhealth-thalamus" arch="src">
  <version epoch="0" ver="0.9.11" rel="lp151.2.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1511611200">- Version 0.0.6
  initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1533816000">- Version 0.0.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- version 0.9.4
  various bugfixes and functional improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545048000">- version 0.9.5
  templates and static added to the tarball</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552046400">- Version 0.9.8
  rewrite to use PostgreSQL instad of mongoDB</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- version 0.9.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1568808000">- version 0.9.10 - various bugfixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573992000">- version 0.9.11</changelog>
</package>
<package pkgid="48dd855f97b8550862a4a29179fa43233f6e7be603a3de2fb3f029940f25fc28" name="gnuhealth-thalamus" arch="noarch">
  <version epoch="0" ver="0.9.9" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1511611200">- Version 0.0.6
  initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1533816000">- Version 0.0.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- version 0.9.4
  various bugfixes and functional improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545048000">- version 0.9.5
  templates and static added to the tarball</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552046400">- Version 0.9.8
  rewrite to use PostgreSQL instad of mongoDB</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- version 0.9.9</changelog>
</package>
<package pkgid="d2dcb6e8a3098c6a0a868551c6afe18e05cc1c9e3b13a99268c0c865f01cd423" name="gnuhealth-thalamus" arch="src">
  <version epoch="0" ver="0.9.9" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1511611200">- Version 0.0.6
  initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1533816000">- Version 0.0.9</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- version 0.9.4
  various bugfixes and functional improvements</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545048000">- version 0.9.5
  templates and static added to the tarball</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552046400">- Version 0.9.8
  rewrite to use PostgreSQL instad of mongoDB</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562846400">- version 0.9.9</changelog>
</package>
<package pkgid="e2796171ef9d6f621a16eec10a1bb79addf5baefdcd925c0ccbe9aba8f2fcb5e" name="gnutls" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="d8f67c54783a6d2408ced697f2953e94c7a17920d5d2b5bc8be96ab33ae34885" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="e9e898f643f3bdf0dfa89edf72989e116061e5cf0eadc8220bbdf3abe274e997" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="8b532fc63be876381aa01602344c0e7f3f36334d18a397c62659bec104626870" name="gnutls-guile" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="86e321f4a496660311f1d8dcf71107e432184d4df164ffeac5e1a01150012612" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b0b184fc82ac8948419e96cb5bbfef192ef58527ffa32425656804b9168a88d1" name="go" arch="i586">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="f5000884dd2a242589ff99c547203964609435eb942c5fbe4560c3d555dfadda" name="go" arch="src">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="0ff6ae86a9c9d3cc8d3d090cc98648ef74a35e753ae7d4e4fa8a9374b6e92cf0" name="go" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="447203092f4012290f4001f81c4e02a689989d5ff6f9b4c1c7787895a26de7c8" name="go-doc" arch="i586">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="aae7b3bfcd69a2e461f88015763484be3cdc6e701bd40c0f3de2749b0dadc5c0" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="1366eca02ef234dde0818f7e2f061e8442b6081cd7f452b0d5e6af7ca41c1508" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="6fe758f5ff0e8b7d4ab2d09d884e4a2b6a48319c900c02c133d695fd3a9d2445" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.10" rel="lp151.2.6.10"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="bb72a24d699184b94e4acecac9a0e8c065b8f9159a26880439c97189d26ce2ea" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp151.2.6.10"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="2a0537a8dc492ec00b72086b6e6ecb1dc925c3c05942f73195b578b92869be1c" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.13" rel="lp151.2.9.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="3c7a5c2a0f645bba2ed95170538f96a6855d7928bba33a54e49f73003160cdeb" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp151.2.9.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="9c5ecc621d7ca19a41fb72ea1de08f37c4d2b2798fd2c4117f86755d406a3d81" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="99377466a4771520ab9e8ba5ad08f0dd0c221e0e77de9c110a79ddbb1835f036" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="6f72ef5b30c51c1a6aacf923e6eb24c31d1dc31f82ca0a1df8cb1cabc9f0a582" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp151.2.6.10"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="6106f541f5e1a21be3b67084d98e990c276f7610b2a932d0b604d4117263fe3c" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp151.2.9.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="b78f741aa0f3acb5bc0eb5ee9fa621e75e259dceef722e3ea7705d3b29ce4ad5" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="39f734cef5f436260de9131a3c55ec6371ec188ed1e6faceb2ae0fa1e083e871" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp151.2.6.10"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="59502784ade2237bd9fa368aff263fc8d8cf98562979e4d5b2e16f10e2b08812" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp151.2.9.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="3c429d8e0fc414a96c9e4942e875cc4bf39e079bb9655ca8aaac2b03dd41c98c" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="622e641ebad9e9d9681f664e705889e1d2729018dfbca8e7adadc168fa700075" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.12" rel="lp151.2.25.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1569499200">- go1.12.10 (released 2019/09/25) includes security fixes to the
  net/http package addressing the following CVE:
  CVE-2019-16276
  Refs boo#1141689.
  * boo#1152082 CVE-2019-16276
  * go#34540 net/http: invalid headers are normalized, allowing request smuggling</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571313600">- go1.12.11 (released 2019/10/17) includes security fixes to the
  crypto/dsa package addressing the following CVE:
  CVE-2019-17596
  Refs boo#1141689.
  * boo#1154402 CVE-2019-17596
  * go#34961 crypto/dsa: invalid public key causes panic in dsa.Verify</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571400000">- go1.12.12 (released 2019/10/17) includes fixes to the go command,
  runtime, syscall and net packages.
  Refs boo#1141689.
  * go#34881 net/http: Client.Do() panics when URL includes HTTP basic auth
  * go#34789 cmd/go/internal/modconv: TestConvertLegacyConfig failing on release-branch.go1.12
  * go#34713 runtime, internal/poll: darwin: ensure that no thread is consumed, nor a syscall.Read if FD isn't yet ready for I/O
  * go#34711 runtime: "program exceeds 50-thread limit" in test of os package on darwin-arm-mg912baios
  * go#34661 net: infinite loop in LookupAddr()
  * go#34641 syscall: (*LazyProc).Call does not keep arguments alive (anymore)
  * go#33983 cmd/cover: cannot run in directory with no .go files
  * go#33982 x/sys/unix: TestPassFD consistently failing in aix-ppc64 builder on release-branch.go1.12
  * go#33877 net/http: Transport leaks net.Conns if connections never become idle
  * go#33758 x/build, cmd/go: TestGoGetInsecure failing in release-branch.go1.12
  * go#33757 x/build, runtime: linux-s390x-ibm regression in TestGdbPython on release-branch.go1.12
  * go#33756 x/build: skip `darwin-386-10_14` builder on release-branch.go1.12
  * go#33673 cmd/go: regression on the default of CGO_ENABLED to 0 for cross builds
  * go#31887 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set
  * go#31305 x/arch/arm64/arm64asm: TestObjdumpARM64TestDecode{GNU,Go}Syntaxdata failing at Go 1.12.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1571659200">- Fix broken go_api evaluation (1.12 &lt; 1.5, when evaluated as floats),
  let RPM evaluate the expression, drop no longer required bc.
- Own the gdbinit.d directory, avoid the build dependency on gdb.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1572350400">- Add %ifarch %arm aarch64 BuildRequires: binutils-gold to fix
  /usr/lib64/go/{version}/pkg/tool/linux_arm64/link: running gcc failed: exit status 1
  collect2: fatal error: cannot find 'ld'-</changelog>
</package>
<package pkgid="0473355a84deb62837c9ac28ec365acfaa657b2a2905cadb176ce998b8939918" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.12" rel="lp151.2.25.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1569499200">- go1.12.10 (released 2019/09/25) includes security fixes to the
  net/http package addressing the following CVE:
  CVE-2019-16276
  Refs boo#1141689.
  * boo#1152082 CVE-2019-16276
  * go#34540 net/http: invalid headers are normalized, allowing request smuggling</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571313600">- go1.12.11 (released 2019/10/17) includes security fixes to the
  crypto/dsa package addressing the following CVE:
  CVE-2019-17596
  Refs boo#1141689.
  * boo#1154402 CVE-2019-17596
  * go#34961 crypto/dsa: invalid public key causes panic in dsa.Verify</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571400000">- go1.12.12 (released 2019/10/17) includes fixes to the go command,
  runtime, syscall and net packages.
  Refs boo#1141689.
  * go#34881 net/http: Client.Do() panics when URL includes HTTP basic auth
  * go#34789 cmd/go/internal/modconv: TestConvertLegacyConfig failing on release-branch.go1.12
  * go#34713 runtime, internal/poll: darwin: ensure that no thread is consumed, nor a syscall.Read if FD isn't yet ready for I/O
  * go#34711 runtime: "program exceeds 50-thread limit" in test of os package on darwin-arm-mg912baios
  * go#34661 net: infinite loop in LookupAddr()
  * go#34641 syscall: (*LazyProc).Call does not keep arguments alive (anymore)
  * go#33983 cmd/cover: cannot run in directory with no .go files
  * go#33982 x/sys/unix: TestPassFD consistently failing in aix-ppc64 builder on release-branch.go1.12
  * go#33877 net/http: Transport leaks net.Conns if connections never become idle
  * go#33758 x/build, cmd/go: TestGoGetInsecure failing in release-branch.go1.12
  * go#33757 x/build, runtime: linux-s390x-ibm regression in TestGdbPython on release-branch.go1.12
  * go#33756 x/build: skip `darwin-386-10_14` builder on release-branch.go1.12
  * go#33673 cmd/go: regression on the default of CGO_ENABLED to 0 for cross builds
  * go#31887 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set
  * go#31305 x/arch/arm64/arm64asm: TestObjdumpARM64TestDecode{GNU,Go}Syntaxdata failing at Go 1.12.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1571659200">- Fix broken go_api evaluation (1.12 &lt; 1.5, when evaluated as floats),
  let RPM evaluate the expression, drop no longer required bc.
- Own the gdbinit.d directory, avoid the build dependency on gdb.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1572350400">- Add %ifarch %arm aarch64 BuildRequires: binutils-gold to fix
  /usr/lib64/go/{version}/pkg/tool/linux_arm64/link: running gcc failed: exit status 1
  collect2: fatal error: cannot find 'ld'-</changelog>
</package>
<package pkgid="1d64bad183e7734ca24337442d05a9e46a41971e9addad8dbfcf3019ef40b5c1" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="4ac8446e3b28bf52deb1a779dce4f9c6cc4d1f6bcea5131f1137b5705f60f9b6" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="2f587bf0dd729d323a0f636d326afd8eb316883576b38ce61b65e8b3f4433617" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.6" rel="lp151.2.6.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="030794c4399795bbaa6e810058e91fead262a9478b1afc478813a07a9de2e4c1" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp151.2.6.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="624b97156f1f6cfa58fae98b47dbe369a98d3ed1b4c7b635f4ccfe28d6196410" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.9" rel="lp151.2.13.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="a519f7e02de92261b747b1bdf2ca3fc029b91db7a8a84c2af0c95e9ee839d340" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.13.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="0a4d8fab983032783bd2305803c2bc1f3068e06ac463090c4bff70084dcfa195" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.9" rel="lp151.2.17.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="3660ca422828ce9b623adba26527666b84ee07b55b47e49baf5df36a259df75a" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.17.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="c1cf2f9f9f20192aaa54cabc65a8d43ba12e37cfee19451c8d11467945137763" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.9" rel="lp151.2.21.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="03fbf79c50cdc4b6768510db47e62db26db13e0572184e59bf63cfc41f7a3686" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.21.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="6b383aea09919b936a60d4d1086bfe96b2ed38b3305910c2bf0639e59c1d8460" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.9" rel="lp151.2.9.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="2015969797b4ceb09a47df9c38558a104f04dca4fb8c4a93d286793f599c2b16" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.9.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="d9bccfa44d180f57aa957f7cc2e6d9684aae7f667b596726ba391666ce21f33c" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.12" rel="lp151.2.25.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1569499200">- go1.12.10 (released 2019/09/25) includes security fixes to the
  net/http package addressing the following CVE:
  CVE-2019-16276
  Refs boo#1141689.
  * boo#1152082 CVE-2019-16276
  * go#34540 net/http: invalid headers are normalized, allowing request smuggling</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571313600">- go1.12.11 (released 2019/10/17) includes security fixes to the
  crypto/dsa package addressing the following CVE:
  CVE-2019-17596
  Refs boo#1141689.
  * boo#1154402 CVE-2019-17596
  * go#34961 crypto/dsa: invalid public key causes panic in dsa.Verify</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571400000">- go1.12.12 (released 2019/10/17) includes fixes to the go command,
  runtime, syscall and net packages.
  Refs boo#1141689.
  * go#34881 net/http: Client.Do() panics when URL includes HTTP basic auth
  * go#34789 cmd/go/internal/modconv: TestConvertLegacyConfig failing on release-branch.go1.12
  * go#34713 runtime, internal/poll: darwin: ensure that no thread is consumed, nor a syscall.Read if FD isn't yet ready for I/O
  * go#34711 runtime: "program exceeds 50-thread limit" in test of os package on darwin-arm-mg912baios
  * go#34661 net: infinite loop in LookupAddr()
  * go#34641 syscall: (*LazyProc).Call does not keep arguments alive (anymore)
  * go#33983 cmd/cover: cannot run in directory with no .go files
  * go#33982 x/sys/unix: TestPassFD consistently failing in aix-ppc64 builder on release-branch.go1.12
  * go#33877 net/http: Transport leaks net.Conns if connections never become idle
  * go#33758 x/build, cmd/go: TestGoGetInsecure failing in release-branch.go1.12
  * go#33757 x/build, runtime: linux-s390x-ibm regression in TestGdbPython on release-branch.go1.12
  * go#33756 x/build: skip `darwin-386-10_14` builder on release-branch.go1.12
  * go#33673 cmd/go: regression on the default of CGO_ENABLED to 0 for cross builds
  * go#31887 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set
  * go#31305 x/arch/arm64/arm64asm: TestObjdumpARM64TestDecode{GNU,Go}Syntaxdata failing at Go 1.12.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1571659200">- Fix broken go_api evaluation (1.12 &lt; 1.5, when evaluated as floats),
  let RPM evaluate the expression, drop no longer required bc.
- Own the gdbinit.d directory, avoid the build dependency on gdb.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1572350400">- Add %ifarch %arm aarch64 BuildRequires: binutils-gold to fix
  /usr/lib64/go/{version}/pkg/tool/linux_arm64/link: running gcc failed: exit status 1
  collect2: fatal error: cannot find 'ld'-</changelog>
</package>
<package pkgid="0f103bdf4a38fe5d1c18ecab8d7183b18e95f489918cb755e516d516d4668bf2" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="3580dcde70c80906c26799582a98bc13e6ff188b3b32a43db9752cada9ed3787" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp151.2.6.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="1c4b138cfa96bf27f12347d1cc758e873a9c2c6a4c6f2173510f0cce6e87eff1" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.13.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="f2207d77b6a1800f6c005e9524b33d5813e6e096a7586320fabb01d61c4bc44a" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.17.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="82bf5b29e47d6f1b62d9e36ba5517e44c7631cb26237b671bff3db6b359e4ac5" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.21.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="7fdbbc438bbb34ea6635773afa5f56da6b11f274ea2f5fe38f0d82b96f22e8b0" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.9.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="ed1bf26740f5da7e4099dbc30b2bfac59e2dafa8842c4c400e194c8d1710ca99" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.12" rel="lp151.2.25.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1569499200">- go1.12.10 (released 2019/09/25) includes security fixes to the
  net/http package addressing the following CVE:
  CVE-2019-16276
  Refs boo#1141689.
  * boo#1152082 CVE-2019-16276
  * go#34540 net/http: invalid headers are normalized, allowing request smuggling</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571313600">- go1.12.11 (released 2019/10/17) includes security fixes to the
  crypto/dsa package addressing the following CVE:
  CVE-2019-17596
  Refs boo#1141689.
  * boo#1154402 CVE-2019-17596
  * go#34961 crypto/dsa: invalid public key causes panic in dsa.Verify</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1571400000">- go1.12.12 (released 2019/10/17) includes fixes to the go command,
  runtime, syscall and net packages.
  Refs boo#1141689.
  * go#34881 net/http: Client.Do() panics when URL includes HTTP basic auth
  * go#34789 cmd/go/internal/modconv: TestConvertLegacyConfig failing on release-branch.go1.12
  * go#34713 runtime, internal/poll: darwin: ensure that no thread is consumed, nor a syscall.Read if FD isn't yet ready for I/O
  * go#34711 runtime: "program exceeds 50-thread limit" in test of os package on darwin-arm-mg912baios
  * go#34661 net: infinite loop in LookupAddr()
  * go#34641 syscall: (*LazyProc).Call does not keep arguments alive (anymore)
  * go#33983 cmd/cover: cannot run in directory with no .go files
  * go#33982 x/sys/unix: TestPassFD consistently failing in aix-ppc64 builder on release-branch.go1.12
  * go#33877 net/http: Transport leaks net.Conns if connections never become idle
  * go#33758 x/build, cmd/go: TestGoGetInsecure failing in release-branch.go1.12
  * go#33757 x/build, runtime: linux-s390x-ibm regression in TestGdbPython on release-branch.go1.12
  * go#33756 x/build: skip `darwin-386-10_14` builder on release-branch.go1.12
  * go#33673 cmd/go: regression on the default of CGO_ENABLED to 0 for cross builds
  * go#31887 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set
  * go#31305 x/arch/arm64/arm64asm: TestObjdumpARM64TestDecode{GNU,Go}Syntaxdata failing at Go 1.12.3</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1571659200">- Fix broken go_api evaluation (1.12 &lt; 1.5, when evaluated as floats),
  let RPM evaluate the expression, drop no longer required bc.
- Own the gdbinit.d directory, avoid the build dependency on gdb.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1572350400">- Add %ifarch %arm aarch64 BuildRequires: binutils-gold to fix
  /usr/lib64/go/{version}/pkg/tool/linux_arm64/link: running gcc failed: exit status 1
  collect2: fatal error: cannot find 'ld'-</changelog>
</package>
<package pkgid="ba393a3b4543eb930ec39da6a4104d488eda50d13f5e77cf72d5cac26a1969f1" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="16403ff2e9c67408a9b8be3ac7f6287c2d5bf26413821f099d1855e433d90ba3" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp151.2.6.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="813ab148b407cc1e0c8e89a606835230930ee3ca7687c067ddd95a0e19343163" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.13.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="b3be499ec899b946a653e59ae3823f03e2263c960bfebb1a8df6b47480aafc4b" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.17.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697601">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="1fc33bf3ec931dea36334681298b96bae23dc9e2a502d07b0137e6afebccfeb3" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.21.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="c416a423cc7452fe41c82247c09856ead4916f4f3bcd606c0277a9f7d5776c7b" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp151.2.9.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="06825e732640807d7f2ae6b0c19dfd72c79c7ccb661b9234ac19b81fd456f949" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="09bf9a1f1867a10b3a55642b784578dec1727f060adbca782aa33f1a1214f3d7" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="c3225466a47ec10962f2ec73bfc239a2dd5f60da3b7d37c9baaa5ef91d40393e" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp151.2.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="8d40fe45b1b6a19cd24e23388a5ba7fa764004b4d29595358da0d4a6599b5703" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp151.2.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="1cd51d29ba7b54b0d5ebb61debc55e0d792ea8e61909e07151eaaeed93853f9a" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="17915d5ae5d9f99197c9084615f40686ec479c674375df73137d3b412b9cfcb4" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="296878067f939b4fb3c16f6e0437e0cefc1bccfa1501977ade54347fbc266e79" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190801" rel="lp151.2.10.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="1d942b36ffac999b284553953ff8e18b20e08654f07705f9909bd1091df4775f" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190801" rel="lp151.2.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="707c41684c89d308195341b10ada993cf8f193e72d9e174078c6f3efa7c197d5" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="ff18ecabd64f39e95d28584cdeb6bc7057a633d3ab5c1db54534d172d97a25fa" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="9cacc2b3dcb9b300967ef12a75cc160f965fe547e8ca84d19e2edebf81677a70" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190801" rel="lp151.2.10.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="f7dc471f5ebbf9d27636b25127f8c90557e314797eccd2f5a403f74799340e8d" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190801" rel="lp151.2.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="4dffd0d3ae96d7dc4cf98df9392820b8501b360ea2a05c2543dd8d75bfcd4d59" name="google-compute-engine-oslogin" arch="i586">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="9e7b0927d70503b0b6237d90a9c4a41b0f3029afc17ecebc2a3248279cfb3685" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="ffe445cc5de0e56a848ec9a405aa1f85990f5febd05f54ad0d9d4158da96899c" name="google-compute-engine-oslogin" arch="i586">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="f71158489c979ccd0ce35fd8339aff6d877ad0c8b975a81fc9274adac46c75b7" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="23e9a807959ddbb63955a429ec1c56aeae1fbbcd5cfffbd0ee3f7b1dc3bc3216" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp151.2.10.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="8fff6f35840b1d12d91955ea495740c6aff884a15ca5644a41beb383074bf1ad" name="google-compute-engine-oslogin" arch="i586">
  <version epoch="0" ver="20190801" rel="lp151.2.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="d9b8730fe20a93c6b3f4a88f713e73c590c5ca586357621050240640998ab5f4" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp151.2.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="0165b346a635d8f87de0f9665471daa92c0fdae30476067d702f295794763009" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="920d0090f854e75a9915f30956b95aff2140c1a51dd3af8980ff45c9987135fe" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="d7448834e4cd3285d94546f8af7791b4b02842bf6ba0d28d86fa031f9f47c5d1" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp151.2.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="158b6047fb25db9b55ff5362d3178f54ad2dcb77cc4602ce9579f8740621ae9e" name="gpg2" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="77af0106435ddf440311bdce31d9445f44cc25a2a6da28c3c36541ca73c3832c" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="f5b8a78f0abaaf0e76c78f09e8881a96b3b9b5fb6a11facaeb378eb89b22f5a1" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="de2e8d3738fd3adc9cf7da73e44a09f35194d870c7219f6cdddafed68fca7921" name="gpg2" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.6.1"/>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
</package>
<package pkgid="ec11a2e8d1aee77fd9cedcb2248a80cf0d96adef65267c22bb2761b424454e6c" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.6.6.1"/>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
</package>
<package pkgid="d73ce129a2d123a8e814d8515c72eba2ea9a58a293e8f859d1360ea20650606a" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.6.1"/>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
</package>
<package pkgid="6377bded39e0a2fd818f287d49898a7bdea80d49774488109ea67841b72504c2" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="7addb04a873de56dfac7eb3b7c35e8023d93a19eba145e37592d0c804ac9664d" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp151.6.6.1"/>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
</package>
<package pkgid="e0a83f59d994c6345278770fa98c2bfa00b7c55af239b610ed4d172f1e13a346" name="graphviz" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="062c8bfee529b61c52a7d8020c044501b1952e0a7101ee183a28a30600ffee78" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="03029f74d44d0062f631022bf95e3006d34cf3929c85990a3a22889b862d8f1e" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0f99c307c88635c98bc8a3fef432ed76ca4a4c3604402259ad3241211e25bf78" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="7c0a7ca5d1b64179e5e05978ea2480afaeb9c2c9aca336cdf7c7439c77d38273" name="graphviz-devel" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="b6e85514df0a1278730905aeb7286da570dbc5c6de9e39cdba5060fe292280a4" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5a0e641848e4fa1d534fe776324e5b273660b55b7f6c3029f230da6bbf1ac421" name="graphviz-doc" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="470eb8d28b40b5be91cb618c3d64a886bf55e9224b2266603b09bc76e3dadfa8" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="89faa4a804f5e8e2faa4f49bb4d7bc1ad8d83c7c6e20309bda08b5e6d6c6ad5e" name="graphviz-gd" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="78226517fc430fbfb276b6e65224e9d5e9b139748bb23686f1a0c76301a33a67" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f3fe7bccac2a79d013762d28a5c378cc55ffc456e8f27bcc45d76efbfcb02406" name="graphviz-gnome" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0ad9eee6efd631d9ed442a271e89d6e790c4cdf95051059f5b879588539512ef" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="d2d6e4cec78210d76db06acefbe9ce80d43eb5059739f2f34c809ae825f3bcbb" name="graphviz-guile" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a0a7bf0e24562aa4c6ff6cfad7c538f6ac201fb392a2af29fbd01ce253505c3d" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="bd23243df5865ebd12f97db8e7e5dbcf6973cc83dbeef3769f5ca7a18873e9eb" name="graphviz-gvedit" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="874834c3b6b18719da821baf8b8f30a23931fe53259baeeb29616191aa235bf5" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ba94a7f6cc93746b98b4796b9e7a2969707faab5b0e877f126c02d41fabb16c8" name="graphviz-java" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3c14de4f7e9fe21ec8142030cd964c2147cc75c06f62ccdf0518b5977c52560d" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0c7e5ae2d3095f4309ed6391bd157511deb7b623493c6567608e9c0e038e53ac" name="graphviz-lua" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="332ba014ef02df1cf0f518476058c58ac02dfe425f18f8b80233e1ea796e2380" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0365fe3b5db7c93b9b6fcc5a67ed64cd98fab225f39f667c47841366138a44b7" name="graphviz-perl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3a1366be9466a59084319accc34679b4b7ee33bfa59f03ecc8921c8624169cd0" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="7588d55e021f5500db987dd401e44edadf81b673bb8dd87f0ad0a6fbf4d0a3c8" name="graphviz-php" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="437be83337924eed2873acd6378d7e125722580bc9bdbf111a11a7981de97a6e" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="2a24c42b00d8b7b05f8f82678f3de7459c9c345be29cecf5f88b242842aa2272" name="graphviz-plugins-core" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="767728facbb08eef2307834c9ef0a23abd271978b565b101e4774fbafde340a9" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="79e84a404a0236c5fa3a4b07c7c9427d11215e111d71be8765e78566c72e7422" name="graphviz-python" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="22e335d09685128f073ac42495b25c1764fea560be386aa0523e99a7426dd033" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="be6c432a2d67ce2d41dbcca5876bcd26eda15643c0b342a212076e857e38d1c6" name="graphviz-ruby" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="07d487bbdc1990669b7490a7c94d954175d972c2b9d8f2b376d140234689e3b3" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="57217ed38c63e641b968477b6e1ad887eb1408ab83a27c245e238c6c4255d19d" name="graphviz-smyrna" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="da0febd61c95e66616d68af27eda9c9aed4212fc192fcc0b546e0da89b24b876" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="64837022186b16d9835403d0d95e5eb9a350fd881409a299b4ed8f28562452ac" name="graphviz-tcl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a453e03a825787a57d84cba895d4616a4eb8a092de1a687273832a33bcacd372" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a518792a843d9aae5bd090709fc2ca3c81992794bc85f553b145dc3a5726562b" name="grub2" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="82eacbaf39632067bac74f5a6541ac9c805bbe28723d7f7b060cda96da42153f" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="3fe606070f9bacb533236c41f8fc609eedccbddf567c864409af1802224aef0b" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="0c2a9841ef9feb28176854123638f53e5db2816aca53821706c6fd133028a7d2" name="grub2" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4e20c6e58e76d437a7dd74c662825cce3c1f87845be18d7066d069bcd4c501ed" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c251452896fd8c65c6f6d7bb268096ec3f5ab7675a1b455d0a9d8de72ee90548" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c132378b4bbc5f74fb998e06272bfde495b97091eb8ee9363e5c69aa310e93e5" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="5ed01258de4396e76ac8f3e8a89c9056abd73080185380869ec27b24de26d90d" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="f43bcd236b1fe40b05f22862a731863169edc0e099714d5217760f9f12620807" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="3ea9b0da0de70ee64239e91cf06f11a571bd273dd1978c0b940d89014463153a" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="ec8a3375280caaa50eede2e105ab009673abc88d36a26ba6c7cf6fd8550051b4" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="162ebbfc1c1a2a037d8082473ce7e14d638eaaa390c6991f26539dacecb0ddaa" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="975c179976e1ffcccf04de50c8ea0aa1cf60b9f606890c1801b265fe69f43a8d" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="e293ab21c9f14179c3679c741ac660b82b6182c3019d1b0c927b0b4f31ebef6c" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4467bc5f061215037a2bffc8280da2a22439b574f1a6e6313cd449f3b1636b3a" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="3be461e3d9580aa4b18986f573bd2edf7c4ab3fdd0a1a2dc5b57438413cbec83" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="a570f4d2a8f14918b18c4572709fd7df65b6090d3223a7b1d96549a712e939f3" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="ef25ffc690d4d19b57af3269a6e6e1ee11499d0d99234c3fcb6e24aae20511a5" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c986e74b0b4e0cee453151c3aed7d6067014e35d54911fb878cb231f435a0914" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="1e91434d1264998f8770a8a3a496ea465521544a9255bce8e0e471b818dc2ff7" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4f8320dd32c784aa4b2bc6fd91acd118ab13a49122070ab70eca93fd2e32d956" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="2a6b8f55ed61728524b5cc4be66fbce7909b749161e491f7702e6939ff310a94" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="fb9d89061fd2f35b9fcd3512f31093cdcd557d50025144053992bdd75080131e" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="40d16dd75ab1393aa8d77e4b80ded2a38a8a72218863382352e1c4154dd39a6a" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="477e0369dbc96fda0a77df4c4aedf68efc6ade0eb4a81d4518573f8c0b4068d4" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c93e5abd0dbab16528df61e5fed16f02f4a1156b48be1ecc44d3a60faa6f1b27" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="39e1a6a0a864e42fd512c8afb29154d549556070579ffcb5979602e0f9fd7426" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="7fede0f3a1e47e86fcf4a970a39d213604beb6bbf5ceffd22bd3805c7e7109db" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="92ac9bee234aba090317c187d4819576a3e553b78094270f4a3c788f8d3cebee" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="39e651f412b8d17457215fe9b6bbaf2a276223261c197754e2be0ee5aa340870" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="02b32cfcedcc2a2cc6a05c8fe0e31fdbd84b890df7cc0868aba492acee6278bc" name="gtk3-devel" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5b3e845663f44b6e5bffe29727c37aeb8f4e576bd52745de89831ede822c61c1" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5eabc5bdfa0bf54b3fc7dbcc1615815b4ee19279571405169f757b1b7dad6e48" name="gtk3-devel" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ce5e98de4601cbd8dadcd76e5c7586707279e738680ad55ffb6a65a87bead55e" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="b20db370ad1fc1357e2039cc6feea44ba3ea362ea42fe28b6e519c6f061a1970" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c85c85e22b33de693b4f9261f99d2b25933b8ac2c2eaa526fb6a1e0ccb39bd1a" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f884e5d81bebf41a151c56b62564c5b2c257b841fdb95ec5160d9efcdbf4026f" name="gtk3-immodule-amharic" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="57784439ca6304d00279501e39a515f6b993412516cabc783f4b8cc119af0458" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9fff3029beaae44c77c49b495490685e17ce66578cea7ec2302c217c3b720090" name="gtk3-immodule-amharic" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="c4e13e46bdf0ce3c6ecbbc073a91b57b739b5a905f2e09a17288d3b768e169ce" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="df2946ac84932277510c2588ee421f7eee017719ba582e238afe4b1e1af7cdc7" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="3b1866f1da92b8ef2283359b82315d5d688cd4e0d5bbd35fb53104d3fc85b2a7" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="761879513e446f9b0a0b6402f1b9858c16b7104517096cae35e5586857e2b50c" name="gtk3-immodule-broadway" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="8f730614df60c1fb951f5de7ab4dcf1bb8ced127840d3c4239e051dd5f209267" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="2f827ce269346253a486c903afe123e52caaef19444996dbda4d480a71313fa0" name="gtk3-immodule-broadway" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="b686231fcde78a7c4565b389a47ddce6654d32316cce522383f2bea9b3eb69fe" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="2e56722a37087864014e52e703cb5dd31583c447ced13b1d14aff1021f46858e" name="gtk3-immodule-inuktitut" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="8364417e445730722d72d1b66b75073e6a0b80dd1fa953b58f75b85e28a1c609" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="3199c78cfe1759905f2a636a0572db3a86c4cf17ecac2f82615bc9517249d2ba" name="gtk3-immodule-inuktitut" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="31abea27cd9bb11d7e46fb357106e613c8e4a90df245effff6d5dd2aa9d49ac0" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="86477924fed8be364526f711c89559680c1268dd8466b5b10a56cdb3f0a4dd65" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c16d262ed5e6ba7b1fedefbc639036f910756a11bea9be74e2c789bf04a06ee0" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="231eab7bda52d16bb9a0c19e50cc7ba7b01a7722e1f4bd750209c7ed89203540" name="gtk3-immodule-multipress" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5a31b7b5594fe452d0ddbacb0fcf32462bc31ee83d34d125aaa10d29ae73ea45" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="0e4a9c2ebc3baed3def960aec057c93d4228ef96450c1b4ce4079c71c263d835" name="gtk3-immodule-multipress" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="e507c186b62e1cdc372c42ed0ae987b233beb2d402922919b67c90f234b63bc6" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="28e52c8c9193b384d400725954e9e2c61370f65fbe741b34f438a4f7ac719a6c" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d4ed68cf2cc9de94fe04c4955a8d6de3a42e376715096b1978ef2e4543dd8c1d" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="42616fd9b248004e35a0af241c9ee432d5bb3c35a37b495d54c5dad141f501b8" name="gtk3-immodule-thai" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="69064a8230634b4dd15451898c18ee45893dc7d16b743ae57381244e6218c75c" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d929bcdbe77cf11bca3a4566cc08db84b4f817943f82afab073f67014356a929" name="gtk3-immodule-thai" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1702b96796e43ebc6f379413be0e2bb8dc462c0c0ca4739854711240331455d6" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="23cca7ac363e8573151a50ecd21cf94c9d800e0fe53f80d4db2affa2b3977b1c" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="fd2f0d7f815430899a5e344dc4d9072d39032dff7c5a5cb1286d43a8190e7115" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="45000389a393bb159b35296e3be44320108c3e536c9c98d3baf78f544f88b0ed" name="gtk3-immodule-vietnamese" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="a1832ca0d03401a4c8a563662b814f265f950cb6f8e1261ee480658c54574b5e" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d8718c9b5d0de8b42ecda8270e86becd498b727e9a6072462cec66d9b68da5ac" name="gtk3-immodule-vietnamese" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="31cd0ac0e2b97d9cd52738f94a3a32e2377677922afa006a1772c9fe77bd7b4b" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="6d226d7ef6bce344a5c53dcab6a15104163c77d42b6beb21b34f4064dd6d3572" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="7ec7f7d9c6dfb097e574b78f9109c09d4af8d0e1504bfe80024a75514948f4a9" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4bfe497ac269b1585eddb0d2adf93c5021064761f9d13bd1587d9d1f5df6d628" name="gtk3-immodule-xim" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="24022c5b067d15553d88ef505d779c5a0168851e82e0550151d4360a658c268e" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="1e2a8591a715ee60986b5bd938cbab26b15b4dc9325621e5b07d834b6f05764b" name="gtk3-immodule-xim" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4b622fc4d28ccb9190789795b3c67cd1ba6206609bf46de654764070b3072c03" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="e18dce1b19ab17719ab90f924be766e2d8c4a0650119a22c93d070a912eaa843" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="17b02942b91d55ac3433d0eb3b5d948491bb55e0abe4c1114a0b1476bf39ba4e" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="a6f66a6486956e2cf3f1c3be02931099f351410ac081b35941d21c58409b8a9f" name="gtk3-immodules-tigrigna" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="fa853ea87fdca92b5cfdd564831ab102b525b40aa0eaadc03160689e8e53e2b5" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="40b328d3b6b49d8423953d55fbdfc0e7a653b6f91881d2a2f9d88fb36443d352" name="gtk3-immodules-tigrigna" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="7708f83e1d9afa375b7eee9597426dbbe2fe508751d022aa1fdd97e2ec5af02e" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1ecbcccdb2819daa243e114d71f4e815a99b3e95d8c616163e5e5eca0aedff60" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d38f79fed3ed0bc2fc927a21b876436c8709ee094459f1e948fa1cfa8ef3b481" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4f47a5fe208883dff63c7f5d217c68f5a297411601d192d439629628c6a75a25" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9f891f7de5a618fb66dfb33b33884e575cd47b3c07ee071a75f2d73bfb89295a" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f213e3b6c6b6e91f69c42ec83eb8627fb0c1d8d4311b993b0f03e3c94219b4b8" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9d95ab1629b20d7b0867050ad7912ae98a4a5a7ef5b3123964ea2650160756dc" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="909e82b739e7b8d686ff824870a9a399290ae9167ca7dd0d8bac6cbf926754ac" name="gtk3-tools" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9eb583a9dbceb44b049f070f0a0338591bb8a278355264dfeb6fb923998dc4eb" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5caaedb5504aee01577d833cb200105b44f8d6f5a5509f0903c570089046f694" name="gtk3-tools" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1325a959518630d49ece7e65c3865476fc7cf0c21c257d752f6e820e74c4822e" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="57e0fafb0bd5cc062143af04059551847339e6e7f7a5f4facc1fa64497589568" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="a947164d3c62e97d5efdf2a99f0a6ea21db717636324a66728fb3492220fc35e" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="222b227581a3371e124823162ef8d644827a8fe6dea140eceef11bfdb7adcb69" name="guake" arch="noarch">
  <version epoch="0" ver="3.6.3" rel="lp151.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1528027200">- Update to version 3.2.2:
  * Fix transparency regression on ubuntu composite
    (gh#Guake/guake#1333).
  * Fix transparency issue.
  * Fix right-click on link.
  * Fix bad css override on check tab background
    (gh#Guake/guake#1326).
  * Fix Guake application icon not displayed with German locale.
  * Fix ctrl+click on hyperlinks on VTE 0.50
    (gh#Guake/guake#1295).
  * Fixed "Gruvbox Dark" color palette (swapped foreground and
    background).
  * Swapped foreground and background colors for palettes added in
    commit #58842e9.
  * Add option groupes to the bootstrap scripts.</changelog>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.3.0:
  * Wayland is a bit more well supported. The X11 backend is now
    used by default for GDK and it seems to make the shortcut
    works under most situation.
  * A new command has been added: guake-toggle, should be faster
    than guake -t. You can use it when you register the global
    shortcut manually (X11 or Wayland).</changelog>
  <changelog author="badshah400@gmail.com" date="1532347200">- Update to version 3.3.2:
  * Travis build cleaned build artifacts before deployment,
    leading to missing files when built in the CI.
- Changesn from version 3.3.1:
  * Don't translate application icon (this finally fixes Guake
    application icon not being displayed with German locale, which
    was only partially resolved with gh#Guake/guake#1320)
  * Install of Guake through pip install was broken; fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
  <changelog author="badshah400@gmail.com" date="1538654400">- Update to version 3.4.0:
  * Split and resize terminals via mouse or keyboard shortcuts.
  * "New terminal" / "Rename terminal" / "Close terminal" items
    has been removed from the terminal context menu. They are
    still available on the tab context menu.
  * Fix multiline selection right click (gh#Guake/guake#1413).
  * Fix tab name (gh#Guake/guake#1017).
  * fixes jumping preference window (gh#Guake/guake#1149).
  * fix no focus after closing a split terminal
    (gh#Guake/guake#1421).
  * Add note about shell that does not support --login parameter
    (gh#Guake/guake#469).
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556020800">- Update to version 3.5.0:
  * new hotkey (CTRL+SHIFT+H) to open new tab in home directory
  * "New tab" button (gh#Guake/guake#1471)
  * Open new tab by double-clicking on the tab bar
  * Add new context menu on the notebook
  * Add a CLI option to change palette scheme
    (gh#Guake/guake#1345)
  * Bold text is also bright (&gt;= VTE 0.52 only)
  * guake --split-vertical and --split-horizontal split the
    current
  * tab just like the context menu does
  * Optional close buttons for tabs (disabled by default)
  * Guake can now provide a set of tabs per workspace
  * Reverse transparency slider to be more meaningful
    (gh#Guake/guake#1501)
  * Fix command-line select tab behavior (gh#Guake/guake#1492)
  * removed duplicate event bind? previously I had issue where
    quick-open event would be fired twice because of this.
  * fix settings only applied to the active workspace if more the
    1 is used
  * fix prompt quit dialog numbers when more then 1 workspace is
    used
  * Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1556539200">- Update to 3.6.1:
  * new feature: search in current terminal
  * new feature: session saving
  * new feature: settings export and import
  * various fixes to the core
  * minor build system fixes
  * translation updates</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1558008000">- Update to version 3.6.3:
  * Add drag-n-drop to terminal (text &amp; uris)
  * When scrolling with "shift" (1 page) or "shift + ctrl" (4
    pages) it will be faster (gh#Guake/guake#271)
  * Add schema_version check for tabs session restore
  * Add save/restore terminal split for tabs session -
    Save/Restore terminal split by pre-order traversal full binary
    tree in list
  * Bump tabs session schema_version to 2 (to support terminal
    split)
  * Lazy restore terminal split until Guake is visible
  * Manage terminal signal handler by handler_ids
  * Avoid spurious resize event when showing fullscreened window
  * Make sure workspace-specific-tab-sets only enable on X11
    backend (due to wnck)
  * Add install/uninstall-dev-locale to support dev locale
  * Fix DualTerminalBox grab focus when remove dead child
  * Support customize prefix for make
  * Fix re-focus on terminal after rename dialog destroy
  * Fix split terminal by menu will not follow last terminal cwd
    (if option set)
  * Fix delete_shell using os.waitpid (should not use it)</changelog>
</package>
<package pkgid="4baa23db9d7ddfd2816e89292b57583e20279e4339184c07ee6355143a6a9b2b" name="guake" arch="src">
  <version epoch="0" ver="3.6.3" rel="lp151.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1528027200">- Update to version 3.2.2:
  * Fix transparency regression on ubuntu composite
    (gh#Guake/guake#1333).
  * Fix transparency issue.
  * Fix right-click on link.
  * Fix bad css override on check tab background
    (gh#Guake/guake#1326).
  * Fix Guake application icon not displayed with German locale.
  * Fix ctrl+click on hyperlinks on VTE 0.50
    (gh#Guake/guake#1295).
  * Fixed "Gruvbox Dark" color palette (swapped foreground and
    background).
  * Swapped foreground and background colors for palettes added in
    commit #58842e9.
  * Add option groupes to the bootstrap scripts.</changelog>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.3.0:
  * Wayland is a bit more well supported. The X11 backend is now
    used by default for GDK and it seems to make the shortcut
    works under most situation.
  * A new command has been added: guake-toggle, should be faster
    than guake -t. You can use it when you register the global
    shortcut manually (X11 or Wayland).</changelog>
  <changelog author="badshah400@gmail.com" date="1532347200">- Update to version 3.3.2:
  * Travis build cleaned build artifacts before deployment,
    leading to missing files when built in the CI.
- Changesn from version 3.3.1:
  * Don't translate application icon (this finally fixes Guake
    application icon not being displayed with German locale, which
    was only partially resolved with gh#Guake/guake#1320)
  * Install of Guake through pip install was broken; fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
  <changelog author="badshah400@gmail.com" date="1538654400">- Update to version 3.4.0:
  * Split and resize terminals via mouse or keyboard shortcuts.
  * "New terminal" / "Rename terminal" / "Close terminal" items
    has been removed from the terminal context menu. They are
    still available on the tab context menu.
  * Fix multiline selection right click (gh#Guake/guake#1413).
  * Fix tab name (gh#Guake/guake#1017).
  * fixes jumping preference window (gh#Guake/guake#1149).
  * fix no focus after closing a split terminal
    (gh#Guake/guake#1421).
  * Add note about shell that does not support --login parameter
    (gh#Guake/guake#469).
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556020800">- Update to version 3.5.0:
  * new hotkey (CTRL+SHIFT+H) to open new tab in home directory
  * "New tab" button (gh#Guake/guake#1471)
  * Open new tab by double-clicking on the tab bar
  * Add new context menu on the notebook
  * Add a CLI option to change palette scheme
    (gh#Guake/guake#1345)
  * Bold text is also bright (&gt;= VTE 0.52 only)
  * guake --split-vertical and --split-horizontal split the
    current
  * tab just like the context menu does
  * Optional close buttons for tabs (disabled by default)
  * Guake can now provide a set of tabs per workspace
  * Reverse transparency slider to be more meaningful
    (gh#Guake/guake#1501)
  * Fix command-line select tab behavior (gh#Guake/guake#1492)
  * removed duplicate event bind? previously I had issue where
    quick-open event would be fired twice because of this.
  * fix settings only applied to the active workspace if more the
    1 is used
  * fix prompt quit dialog numbers when more then 1 workspace is
    used
  * Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1556539200">- Update to 3.6.1:
  * new feature: search in current terminal
  * new feature: session saving
  * new feature: settings export and import
  * various fixes to the core
  * minor build system fixes
  * translation updates</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1558008000">- Update to version 3.6.3:
  * Add drag-n-drop to terminal (text &amp; uris)
  * When scrolling with "shift" (1 page) or "shift + ctrl" (4
    pages) it will be faster (gh#Guake/guake#271)
  * Add schema_version check for tabs session restore
  * Add save/restore terminal split for tabs session -
    Save/Restore terminal split by pre-order traversal full binary
    tree in list
  * Bump tabs session schema_version to 2 (to support terminal
    split)
  * Lazy restore terminal split until Guake is visible
  * Manage terminal signal handler by handler_ids
  * Avoid spurious resize event when showing fullscreened window
  * Make sure workspace-specific-tab-sets only enable on X11
    backend (due to wnck)
  * Add install/uninstall-dev-locale to support dev locale
  * Fix DualTerminalBox grab focus when remove dead child
  * Support customize prefix for make
  * Fix re-focus on terminal after rename dialog destroy
  * Fix split terminal by menu will not follow last terminal cwd
    (if option set)
  * Fix delete_shell using os.waitpid (should not use it)</changelog>
</package>
<package pkgid="176e5f2ee07955dd38ec2d92e84233792df8eeef00952b8bbefe2a7171bf0a77" name="guestfs-data" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="52b97a30c3b926080dc9843fcd9eab503c61e023a9d543ac67491429dcd96710" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="7c8fb83f65fbe6a754c46c0839f4197b959dc2d3c3ba3e821da71da4923e37f3" name="guestfsd" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="d01852e779ef746ddc4e14647e53be20bdff4363a297137fd054f2943dd4ded5" name="gvfs" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="12c6e919d4bf6869341b4aec52247ce431de96095b9b75f0ef507f8cd16bfcb6" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="d909e31df32527d2f2bfce0f28dee21a5030d30df0f14ababf1830c524b39529" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8006e8d3618ef8fcb755bbc950722f27d33c4c0dfe1168fb97c2624cf66416db" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="1619b5dbac2e6d9c9824be77fbb6dd386fed4a7d3d46e42126569d270a34a1f1" name="gvfs-backend-afc" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="d201ca8ff3befdc0af7fa900bdc5d78bbc1f555c55b5a6e68628e34753ac43b1" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ea66c2d86ac862444bb0823051f8a49e7fb29b7d1d8a13abca100c5ea29abab9" name="gvfs-backend-samba" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ae483d132f188ac5f46ddfda95220d142d3960859b6c1c813008cc9a8a0beacc" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="821f82194e376ebe686885090a3aa82661ead59adf3560d4fc9e15b4ce5e89e4" name="gvfs-backends" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8e033abca28816c018279f2fb996c9308db79e9971be0dc032383c7fd0405b5f" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8498fc0cfdfefacd1b1e1593d52b2af27aa534834d89c05792b9886c4142e554" name="gvfs-devel" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="351fd3b62c14ecd3abe15d47cb2e9c8b0167463e4c9bc22dbdb6059ac4c5d196" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ed7ad80766bd278bcac6f32e9aafa47997048f8672418ad9a052d54ef5059893" name="gvfs-fuse" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="29b9fbdd9f4493b8b0e59940ee3cda35243ff77a3f44392136fb8a68bf754af1" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="5850f1a0253c2277adc87a6c083728246ab9698bcf060c3a40c7904b5f47e96a" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="c56ac4598f776b364245482d4cb8aac5f2470f00b84fdf20885227cadc6641e9" name="gvim" arch="i586">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="37ea6b7d089745c187ea440b690bc31d42a37d6ce0fb38eeb22097d6b5d553a1" name="gvim" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="b0ce1dfd6bd32e07b01f70d7900c60217bcff031fd62b113b822ee43efed4479" name="ha-cluster-bootstrap" arch="noarch">
  <version epoch="0" ver="0.5" rel="lp151.4.3.1"/>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500984000">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
  <changelog author="kgronlund@suse.com" date="1511870400">- Switch to Python 3 (bsc#1070140)</changelog>
  <changelog author="XLiang@suse.com" date="1565784000">- use help2man to generate init/join/remove man page (bsc#1138353)</changelog>
</package>
<package pkgid="211d17020d8880c549f11266453b6e67316c2c16db7b5444ce601bd7815ddb55" name="ha-cluster-bootstrap" arch="src">
  <version epoch="0" ver="0.5" rel="lp151.4.3.1"/>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500984000">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
  <changelog author="kgronlund@suse.com" date="1511870400">- Switch to Python 3 (bsc#1070140)</changelog>
  <changelog author="XLiang@suse.com" date="1565784000">- use help2man to generate init/join/remove man page (bsc#1138353)</changelog>
</package>
<package pkgid="f26bf4166b2b762e5ad37a2061f3909489076cbdbc0bace14653dfefd9339e7b" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="5b24456da3d6ac3aff737320902c26aaedca6252e2df24cfb331726892c007e2" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="6c5112ea50ae4b2191d81a85fefe631e3714271544294723b59a35585d530a9f" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.4" rel="lp151.7.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
</package>
<package pkgid="6e723d6ae7b06ac247bcc10d0580395eccffdb80343ab736eec97a94c9521b50" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.4" rel="lp151.7.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
</package>
<package pkgid="933445572c6d2b7a17d0b07a27516dcaf99f2f12e92cd643b27cb6c661e212a8" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.9" rel="lp151.10.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1566388800">- Version bump 0.2.5
  * Add HA monitoring to the formula</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1566734400">- Version bump 0.2.6
  * Fix typo in Pillar attribute name</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1567598400">- Update the pkg.info_available call to avoid repositories refresh as
  it may cause errors
- Add packages and ha_exporter options to the SUMA form.yml file</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1568808000">- remove and replace hawk-apiserver with prometheus-ha_cluster_exporter pkg</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1571227200">- Version bump 0.2.8
  * Add customizable timeout to the join process and rename join_timer to
  wait_for_initialization</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1572436800">- Version bump 0.2.9
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
</package>
<package pkgid="97cd910b378cc8495351393fe91fe7bc55180ca81b4caee2d615c3652d36d48f" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.9" rel="lp151.10.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1566388800">- Version bump 0.2.5
  * Add HA monitoring to the formula</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1566734400">- Version bump 0.2.6
  * Fix typo in Pillar attribute name</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1567598400">- Update the pkg.info_available call to avoid repositories refresh as
  it may cause errors
- Add packages and ha_exporter options to the SUMA form.yml file</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1568808000">- remove and replace hawk-apiserver with prometheus-ha_cluster_exporter pkg</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1571227200">- Version bump 0.2.8
  * Add customizable timeout to the join process and rename join_timer to
  wait_for_initialization</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1572436800">- Version bump 0.2.9
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
</package>
<package pkgid="74bcf48394d5b0876016c75dfb1d30661b1c1651bf93faea197110fff15b389c" name="haproxy" arch="src">
  <version epoch="0" ver="2.0.5+git0.d905f49a" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
  <changelog author="kgronlund@suse.com" date="1545048000">- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102)
  * DOC: Update configuration doc about the maximum number of stick counters.
  * BUG: dns: Fix off-by-one write in dns_validate_dns_response()
  * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_read_name()
  * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name
  * DOC: refer to check-sni in the documentation of sni
  * DOC: clarify that check-sni needs an argument.
  * MINOR: servers: Free [idle|safe|priv]_conns on exit.
  * MINOR: stats: report the number of active jobs and listeners in "show info"
  * BUG/MINOR: mux-h2: advertise a larger connection window size
  * BUG/MINOR: mux-h2: refrain from muxing during the preface
  * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation
  * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR.
  * BUG/MINOR: lb-map: fix unprotected update to server's score
  * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed
  * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name
  * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id
  * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field
  * BUG/MINOR: config: Copy default error messages when parsing of a backend starts
  * BUG/MEDIUM: Make sure stksess is properly aligned.
  * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn
  * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe
  * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer
  * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic
  * BUG/MINOR: only mark connections private if NTLM is detected
  * DOC: cache: Missing information about "total-max-size"
  * BUG/MINOR: ssl: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Crashes with "total-max-size" &gt; 2047(MB).
  * BUG/MEDIUM: h2: Close connection if no stream is left an GOAWAY was sent.
  * BUG/MEDIUM: pools: Fix the usage of mmap()) with DEBUG_UAF.
  * DOC: fix reference to map files in MAINTAINERS
  * MINOR: peers: use defines instead of enums to appease clang.
  * MINOR: cfgparse: Write 130 as 128 as 0x82 and 0x80.
  * MINOR: server: Use memcpy() instead of strncpy().
  * CLEANUP: stick-tables: Remove unneeded double (()) around conditional clause
  * MINOR: lua: all functions calling lua_yieldk() may return
  * BUG/MEDIUM: threads: make sure threads_want_sync is marked volatile
  * BUG/MEDIUM: threads: fix thread_release() at the end of the rendez-vous point
  * BUG/MEDIUM: stream: don't crash on out-of-memory
  * BUG/MEDIUM: mworker: segfault receiving SIGUSR1 followed by SIGTERM.
  * BUG/MINOR: checks: queues null-deref
  * BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.
  * MEDIUM: ssl: add support for ciphersuites option for TLSv1.3
  * BUG/MEDIUM: buffers: Make sure we don't wrap in buffer_insert_line2/replace2.
  * BUG/MINOR: backend: check that the mux installed properly
  * BUG/MINOR: connection: avoid null pointer dereference in send-proxy-v2
  * DOC: clarify force-private-cache is an option
  * MINOR: threads: Make sure threads_sync_pipe is initialized before using it.</changelog>
  <changelog author="kgronlund@suse.com" date="1547121600">- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615):
  * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used
  * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred
  * BUG/MINOR: lua: bad args are returned for Lua actions
  * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything
  * BUG/MEDIUM: cli: make "show sess" really thread-safe
  * MINOR: stream/cli: report more info about the HTTP messages on "show sess all"
  * MINOR: stream/cli: fix the location of the waiting flag in "show sess all"
  * MINOR: lb: allow redispatch when using consistent hash
  * BUG/MEDIUM: server: Also copy "check-sni" for server templates.
  * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max
  * MINOR: mux-h2: only increase the connection window with the first update
  * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify()
  * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error
  * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response()
  * BUG/MINOR: logs: leave startup-logs global and not per-thread</changelog>
  <changelog author="kgronlund@suse.com" date="1549886400">- Update to version 1.8.19~git0.ebf033b4:
  * [RELEASE] Released version 1.8.19
  * BUG/MINOR: config: Reinforce validity check when a process number is parsed
  * BUG/MAJOR: stream: avoid double free on unique_id
  * BUG/MAJOR: spoe: Don't try to get agent config during SPOP healthcheck
  * BUG/MEDIUM: server: initialize the idle conns list after parsing the config
  * BUG/MEDIUM: spoe: initialization depending on nbthread must be done last
  * BUG/MINOR: lua: initialize the correct idle conn lists for the SSL sockets
  * BUG/MINOR: spoe: do not assume agent-&gt;rt is valid on exit
  * DOC: ssl: Stop documenting ciphers example to use
  * DOC: ssl: Clarify when pre TLSv1.3 cipher can be used
  * [RELEASE] Released version 1.8.18
  * BUG/MINOR: config: make sure to count the error on incorrect track-sc/stick rules
  * BUG/MAJOR: spoe: verify that backends used by SPOE cover all their callers' processes
  * BUG/MAJOR: config: verify that targets of track-sc and stick rules are present
  * BUG/MINOR: config: fix bind line thread mask validation
  * BUG/MEDIUM: stream: Don't forget to free s-&gt;unique_id in stream_free().
  * BUG/MEDIUM: mux-h2: do not close the connection on aborted streams
  * MINOR: connstream: have a new flag CS_FL_KILL_CONN to kill a connection
  * MINOR: stream-int: add a new flag to mention that we want the connection to be killed
  * MINOR: stream-int: expand the flags to 32-bit
  * BUG/MEDIUM: mux-h2: wait for the mux buffer to be empty before closing the connection
  * BUG/MEDIUM: mux-h2: make sure never to send GOAWAY on too old streams
  * BUG/MEDIUM: mux-h2: fix two half-closed to closed transitions
  * BUG/MEDIUM: mux-h2: wake up flow-controlled streams on initial window update
  * MINOR: xref: Add missing barriers.
  * BUG/MINOR: stream: don't close the front connection when facing a backend error
  * SCRIPTS: add the issue tracker URL to the announce script
  * SCRIPTS: add the slack channel URL to the announce script
  * BUG/MINOR: deinit: tcp_rep.inspect_rules not deinit, add to deinit
  * BUG/MINOR: spoe: corrected fragmentation string size
  * DOC: nbthread is no longer experimental.
  * BUG/MINOR: hpack: return a compression error on invalid table size updates
  * BUG/MINOR: mux-h2: make it possible to set the error code on an already closed stream
  * BUG/MINOR: mux-h2: headers-type frames in HREM are always a connection error
  * BUG/MINOR: mux-h2: CONTINUATION in closed state must always return GOAWAY
  * MINOR: h2: declare new sets of frame types
  * MINOR: h2: add a bit-based frame type representation
  * DOC: mention the effect of nf_conntrack_tcp_loose on src/dst
  * BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages
  * BUG/MINOR: check: Wake the check task if the check is finished in wake_srv_chk()
  * BUG/MINOR: server: don't always trust srv_check_health when loading a server state
  * BUG/MINOR: stick_table: Prevent conn_cur from underflowing
  * BUG/MINOR: backend: BE_LB_LKUP_CHTREE is a value, not a bit
  * BUG/MINOR: backend: balance uri specific options were lost across defaults
  * BUG/MINOR: backend: don't use url_param_name as a hint for BE_LB_ALGO_PH
  * BUG/MEDIUM: ssl: missing allocation failure checks loading tls key file
  * DOC: Be a bit more explicit about allow-0rtt security implications.
  * BUG/MEDIUM: ssl: Disable anti-replay protection and set max data with 0RTT.
  * BUG/MAJOR: cache: fix confusion between zero and uninitialized cache key
  * DOC: http-request cache-use / http-response cache-store expects cache name</changelog>
  <changelog author="kgronlund@suse.com" date="1556884800">- Update to version 1.8.20~git0.6fb9fadc:
  * [RELEASE] Released version 1.8.20
  * BUG/MINOR: spoe: Don't systematically wakeup SPOE stream in the applet handler
  * BUG/MINOR: da: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MINOR: 51d: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MEDIUM: thread/http: Add missing locks in set-map and add-acl HTTP rules
  * BUG/MINOR: acl: properly detect pattern type SMP_T_ADDR
  * BUG/MEDIUM: maps: only try to parse the default value when it's present
  * BUG/MAJOR: http_fetch: Get the channel depending on the keyword used
  * MINOR: skip get_gmtime where tm is unused
  * BUILD/MINOR: listener: Silent a few signedness warnings.
  * BUG/MEDIUM: listener: make sure the listener never accepts too many conns
  * BUG/MEDIUM: listener: use a self-locked list for the dequeue lists
  * MAJOR: listener: do not hold the listener lock in listener_accept()
  * BUG/MEDIUM: list: fix incorrect pointer unlocking in LIST_DEL_LOCKED()
  * BUG/MEDIUM: list: fix again LIST_ADDQ_LOCKED
  * BUG/MEDIUM: list: correct fix for LIST_POP_LOCKED's removal of last element
  * MINOR: list: make the delete and pop operations idempotent
  * BUG/MEDIUM: list: add missing store barriers when updating elements and head
  * BUG/MEDIUM: list: fix LIST_POP_LOCKED's removal of the last pointer
  * BUG/MEDIUM: list: fix the rollback on addq in the locked liss
  * BUG/MEDIUM: lists: Properly handle the case we're removing the first elt.
  * MINOR: lists: Implement locked variations.
  * BUG/MINOR: threads: fix the process range of thread masks
  * BUG/MEDIUM: spoe: Return an error if nothing is encoded for fragmented messages
  * BUG/MEDIUM: spoe: Queue message only if no SPOE applet is attached to the stream
  * BUG/MEDIUM: pattern: assign pattern IDs after checking the config validity
  * BUILD: connection: fix naming of ip_v field
  * BUILD: use inttypes.h instead of stdint.h
  * BUG/MEDIUM: peers: fix a case where peer session is not cleanly reset on release.
  * MINOR: cli: start addresses by a prefix in 'show cli sockets'
  * BUG/MINOR: cli: correctly handle abns in 'show cli sockets'
  * BUILD: Makefile: disable shared cache on AIX 5.1
  * BUILD: makefile: add _LINUX_SOURCE_COMPAT to build on AIX-51
  * BUILD: makefile: fix build of IPv6 header on aix51
  * MINOR: tools: make memvprintf() never pass a NULL target to vsnprintf()
  * BUILD: makefile: work around an old bug in GNU make-3.80
  * BUG/MAJOR: checks: segfault during tcpcheck_main
  * DOC: The option httplog is no longer valid in a backend.
  * BUG/MEDIUM: ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites
  * BUG/MINOR: http/counters: fix missing increment of fe-&gt;srv_aborts
  * BUG/MAJOR: stats: Fix how huge POST data are read from the channel
  * BUG/MAJOR: spoe: Fix initialization of thread-dependent fields
  * BUG/MEDIUM: threads/fd: do not forget to take into account epoll_fd/pipes
  * MEDIUM: threads: Use __ATOMIC_SEQ_CST when using the newer atomic API.
  * BUG/MINOR: ssl: fix warning about ssl-min/max-ver support
  * BUG/MEDIUM: 51d: fix possible segfault on deinit_51degrees()
  * BUG/MEDIUM: logs: Only attempt to free startup_logs once.
  * BUG/MINOR: listener: keep accept rate counters accurate under saturation
  * BUG/MAJOR: listener: Make sure the listener exist before using it.</changelog>
  <changelog author="kgronlund@suse.com" date="1560772800">- Update to version 2.0.0~git0.ba23630a:
  - new internal native HTTP representation called HTX, was already in 1.9
    and is now enabled by default in 2.0 ;
  - end-to-end HTTP/2 support including trailers and continuation frames,
    as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using
    the H2 preface;
  - server connection pooling and more advanced reuse, with ALPN protocol
    negotiation (already in 1.9) ;
  - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers
    as well as on the frontend ;
  - much more scalable multi-threading, which is even enabled by default on
    platforms where it was successfully tested ; by default, as many threads
    are started as the number of CPUs haproxy is allowed to run on. This
    removes a lot of configuration burden in VMs and containers ;
  - automatic maxconn setting for the process and the frontends, directly
    based on the number of available FDs (easier configuration in containers
    and with systemd) ;
  - logging to stdout for use in containers and systemd (already in 1.9).
    Logs can now provide micro-second resolution for some events ;
  - peers now support SSL, declaration of multiple stick-tables directly in
    the peers section, and synchronization of server names, not just IDs ;
  - In master-worker mode, the master process now exposes its own CLI and
    can communicate with all other processes (including the stopping ones),
    even allowing to connect to their CLI and check their state. It is also
    possible to start some sidecar programs and monitor them from the master,
    and the master can automatically kill old processes that survived too
    many reloads ;
  - the incoming connections are load-balanced between all threads depending
    on their load to minimize the processing time and maximize the capacity
    (already in 1.9) ;
  - the SPOE connection load-balancing was significantly improved in order
    to reduce high percentiles of SPOA response time (already in 1.9) ;
  - the "random" load balancing algorithm and a power-of-two-choices variant
    were introduced ;
  - statistics improvements with per-thread counters for certain things, and
    a prometheus exporter for all our statistics;
  - lots of debugging help, it's easier to produce a core dump, there are
    new commands on the CLI to control various things, there is a watchdog
    to fail cleanly when a thread deadlock or a spinning task are detected,
    so overall it should provide a better experience in field and less
    round trips between users and developers (hence less stress during an
    incident).
  - all 3 device detection engines are now compatible with multi-threading
    and can be build-tested without any external dependencies ;
  - "do-resolve" http-request action to perform a DNS resolution on any,
    sample, and resolvers now support relying on /etc/resolv.conf to match
    the local resolver ;
  - log sampling and balancing : it's now possible to send 1 log every 10
    to a server, or to spread the logging load over multiple log servers;
  - a new SPOA agent (spoa_server) allows to interface haproxy with Python
    and Lua programs ;
  - support for Solaris' event ports (equivalent of kqueue or epoll) which
    will significantly improve the performance there when dealing with
    numerous connections ;
  - some warnings are now reported for some deprecated options that will
    be removed in 2.1. Since 2.0 is long term supported, there's no
    emergency to convert them, however if you see these warnings, you
    need to understand that you're among their extremely rare users and
    just because of this you may be taking risks by keeping them ;
  - A new SOCKS4 server-side layer was provided ; it allows outgoing
    connections to be forwarded through a SOCKS4 proxy (such as ssh -D).
  - priority- and latency- aware server queues : it is possible now to
    assign priorities to certain requests and/or to give them a time
    bonus or penalty to refine control of the traffic and be able to
    engage on SLAs.
  - internally the architecture was significantly redesigned to allow to
    further improve performance and make it easier to implement protocols
    that span over multiple layers (such as QUIC). This work started in
    1.9 and will continue with 2.1.
  - the I/O, applets and tasks now share the same multi-threaded scheduler,
    giving a much better responsiveness and fairness between all tasks as
    is visible with the CLI which always responds instantly even under
    extreme loads (started in 1.9) ;
  - the internal buffers were redesigned to ease zero-copy operations, so
    that it is possible to sustain a high bandwidth even when forwarding
    HTTP/1 to/from HTTP/2 (already in 1.9) ;</changelog>
  <changelog author="mrueckert@suse.de" date="1560859200">- Update to version 2.0.0~git6.41dc8432:
  * BUG/MEDIUM: htx: Fully update HTX message when the block value is changed
  * MINOR: htx: Add the function htx_change_blk_value_len()
  * BUG/MEDIUM: compression: Set Vary: Accept-Encoding for compressed responses
  * BUG/MINOR: mux-h1: Add the header connection in lower case in outgoing messages
  * BUG/MINOR: lua/htx: Make txn.req_req_* and txn.res_rep_* HTX aware
  * BUG/MEDIUM: h2/htx: Update data length of the HTX when the cookie list is built</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560859201">- allow the new master socket path in the apparmor profile</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561896000">- Correct version line, which should be 2.0.0+git6.</changelog>
  <changelog author="kgronlund@suse.com" date="1562673600">- Update to version 2.0.1+git27.5db881ff:
  * BUG/MINOR: ssl: revert empty handshake detection in OpenSSL &lt;= 1.0.2
  * BUG/MEDIUM: servers: Don't forget to set srv_cs to NULL if we can't reuse it.
  * BUG/MEDIUM: stream-int: Don't rely on CF_WRITE_PARTIAL to unblock opposite si
  * MINOR: stream-int: Factorize processing done after sending data in si_cs_send()
  * BUG/MINOR: mux-h1: Don't process input or ouput if an error occurred
  * BUG/MEDIUM: mux-h1: Handle TUNNEL state when outgoing messages are formatted
  * BUG/MEDIUM: lb_fas: Don't test the server's lb_tree from outside the lock
  * BUG/MEDIUM: http/applet: Finish request processing when a service is registered
  * MINOR: action: Add the return code ACT_RET_DONE for actions
  * BUG/MINOR: contrib/prometheus-exporter: Don't try to add empty data blocks
  * MINOR: server: Add "no-tfo" option.
  * BUG/MEDIUM: sessions: Don't keep an extra idle connection in sessions.
  * BUG/MEDIUM: servers: Authorize tfo in default-server.
  * BUG/MEDIUM: connections: Make sure we're unsubscribe before upgrading the mux.
  * BUG/MINOR: contrib/prometheus-exporter: Respect the reserve when data are sent
  * BUG/MINOR: hlua/htx: Respect the reserve when HTX data are sent
  * BUG/MEDIUM: channel/htx: Use the total HTX size in channel_htx_recv_limit()
  * BUG/MINOR: hlua: Don't use channel_htx_recv_max()
  * BUG/MINOR: contrib/prometheus-exporter: Don't use channel_htx_recv_max()
  * BUG/MEDIUM: checks: Make sure the tasklet won't run if the connection is closed.
  * BUG/MEDIUM: connections: Always call shutdown, with no linger.
  * BUG/MINOR: mux-h1: Don't return the empty chunk on HEAD responses
  * BUG/MINOR: mux-h1: Skip trailers for non-chunked outgoing messages
  * BUG/MEDIUM: checks: unblock signals in external checks
  * BUG/MEDIUM: mux-h1: Always release H1C if a shutdown for writes was reported
  * BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL.
  * BUG/MINOR: mworker/cli: don't output a \n before the response
  * BUG/MINOR: mux-h1: Make format errors during output formatting fatal
  * BUG/MEDIUM: mux-h1: Use buf_room_for_htx_data() to detect too large messages
  * BUG/MEDIUM: proto_htx: Don't add EOM on 1xx informational messages
  * BUG/MINOR: log: Detect missing sampling ranges in config
  * BUG/MINOR: memory: Set objects size for pools in the per-thread cache
  * BUG/MAJOR: mux-h1: Don't crush trash chunk area when outgoing message is formatted
  * BUG/MINOR: htx: Save hdrs_bytes when the HTX start-line is replaced
  * BUG/MEDIUM: ssl: Don't do anything in ssl_subscribe if we have no ctx.
  * BUG/MEDIUM: connections: Always add the xprt handshake if needed.
  * BUG/MEDIUM: stream_interface: Don't add SI_FL_ERR the state is &lt; SI_ST_CON.
  * BUG/MINOR: spoe: Fix memory leak if failing to allocate memory
  * BUG/MEDIUM: mworker/cli: command pipelining doesn't work anymore
  * BUG/MEDIUM: mworker: don't call the thread and fdtab deinit
  * BUG/MINOR: mworker-prog: Fix segmentation fault during cfgparse
  * BUG/MAJOR: sample: Wrong stick-table name parsing in "if/unless" ACL condition.
  * BUG/MEDIUM: lb_fwlc: Don't test the server's lb_tree from outside the lock
  * BUG/MEDIUM: mux-h2: Remove the padding length when a DATA frame size is checked
  * BUG/MEDIUM: mux-h2: Reset padlen when several frames are demux</changelog>
  <changelog author="kgronlund@suse.com" date="1564488000">- Update to version 2.0.3+git14.0ff395c1 (bsc#1142529) (CVE-2019-14241):
  * BUG/MAJOR: queue/threads: avoid an AB/BA locking issue in process_srv_queue()
  * BUG/MINOR: htx: Fix free space addresses calculation during a block expansion
  * BUG/MINOR: hlua: Only execute functions of HTTP class if the txn is HTTP ready
  * MINOR: hlua: Add a flag on the lua txn to know in which context it can be used
  * MINOR: hlua: Don't set request analyzers on response channel for lua actions
  * BUG/MEDIUM: hlua: Check the calling direction in lua functions of the HTTP class
  * BUG/MINOR: hlua/htx: Reset channels analyzers when txn:done() is called
  * DOC: improve the wording in CONTRIBUTING about how to document a bug fix
  * BUG/MINOR: log: make sure writev() is not interrupted on a file output
  * BUG/MEDIUM: streams: Don't switch the SI to SI_ST_DIS if we have data to send.
  * BUG/MEDIUM: lb-chash: Fix the realloc() when the number of nodes is increased
  * BUILD: threads: add the definition of PROTO_LOCK
  * BUG/MINOR: proxy: always lock stop_proxy()
  * BUG/MEDIUM: protocols: add a global lock for the init/deinit stuff
  * [RELEASE] Released version 2.0.3
  * BUG/CRITICAL: http_ana: Fix parsing of malformed cookies which start by a delimiter
  * BUG/MINOR: http_htx: Support empty errorfiles
  * BUG/MINOR: http_ana: Be sure to have an allocated buffer to generate an error
  * BUG/MEDIUM: tcp-checks: do not dereference inexisting conn_stream
  * BUG/MINOR: mux-h1: Close server connection if input data remains in h1_detach()
  * BUG/MEDIUM: mux-h1: Trim excess server data at the end of a transaction
  * BUG/MINOR: checks: do not exit tcp-checks from the middle of the loop
  * BUG/MINOR: session: Send a default HTTP error if accept fails for a H1 socket
  * BUG/MINOR: session: Emit an HTTP error if accept fails only for H1 connection
  * BUG/MINOR: debug: Remove flags CO_FL_SOCK_WR_ENA/CO_FL_SOCK_RD_ENA
  * DOC: htx: Update comments in HTX files
  * BUG/MINOR: hlua: Make the function txn:done() HTX aware
  * BUG/MINOR: cache/htx: Make maxage calculation HTX aware
  * BUG/MINOR: http_htx: Initialize HTX error messages for TCP proxies
  * BUG/MINOR: http_fetch: Fix http_auth/http_auth_group when called from TCP rules
  * BUG/MINOR: backend: do not try to install a mux when the connection failed
  * BUG/MEDIUM: http/htx: unbreak option http_proxy
  * BUG/MEDIUM: checks: Don't attempt to receive data if we already subscribed.
  * BUG/MINOR: dns: remove irrelevant dependency on a client connection
  * [RELEASE] Released version 2.0.2
  * BUG/MEDIUM: threads: cpu-map designating a single thread/process are ignored
  * BUG/MEDIUM: tcp-check: unbreak multiple connect rules again
  * BUG/MINOR: mux-pt: do not pretend there's more data after a read0
  * BUG/MEDIUM: streams: Don't redispatch with L7 retries if redispatch isn't set.
  * BUG/MEDIUM: streams: Don't give up if we couldn't send the request.
  * BUG/MINOR: mux-h1: Correctly report Ti timer when HTX and keepalives are used
  * BUG/MEDIUM: mux-h1: Don't release h1 connection if there is still data to send
  * BUG/MAJOR: listener: fix thread safety in resume_listener()
  * MINOR: task: introduce work lists
  * BUG/MEDIUM: servers: Fix a race condition with idle connections.
  * DOC: Fix typos and grammer in configuration.txt
  * BUG/MEDIUM: da: cast the chunk to string.
  * BUG/MEDIUM: checks: Don't attempt to read if we destroyed the connection.
  * BUG/MINOR: server: Be really able to keep "pool-max-conn" idle connections
  * BUG/MEDIUM: fd/threads: fix excessive CPU usage on multi-thread accept</changelog>
  <changelog author="mrueckert@suse.de" date="1566302400">- Update to version 2.0.5+git0.d905f49a:
  * [RELEASE] Released version 2.0.5
  * BUG/MEDIUM: mux_pt: Don't call unsubscribe if we did not subscribe.
  * MINOR: fd: make sure to mark the thread as not stuck in fd_update_events()
  * BUG/MINOR: stats: Wait the body before processing POST requests
  * BUG/MEDIUM: lua: Fix test on the direction to set the channel exp timeout
  * BUG/MEDIUM: mux_h1: Don't bother subscribing in recv if we're not connected.
  * BUG/MINOR: Fix prometheus '# TYPE' and '# HELP' headers
  * BUG/MINOR: lua: fix setting netfilter mark
  * BUG/MEDIUM: proxy: Don't use cs_destroy() when freeing the conn_stream.
  * BUG/MEDIUM: proxy: Don't forget the SF_HTX flag when upgrading TCP=&gt;H1+HTX.
  * BUG/MINOR: buffers/threads: always clear a buffer's head before releasing it
  * MINOR: ssl: ssl_fc_has_early should work for BoringSSL
  * BUG/MINOR: ssl: fix 0-RTT for BoringSSL
  * BUG/MEDIUM: stick-table: Wrong stick-table backends parsing.
  * [RELEASE] Released version 2.0.4
  * BUG/MEDIUM: checks: make sure to close nicely when we're the last to speak
  * BUG/MINOR: mux-h2: always reset rcvd_s when switching to a new frame
  * BUG/MINOR: mux-h2: always send stream window update before connection's
  * BUG/MEDIUM: mux-h2: do not recheck a frame type after a state transition
  * BUG/MINOR: mux-h2: do not send REFUSED_STREAM on aborted uploads
  * BUG/MINOR: mux-h2: use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data()
  * BUG/MINOR: mux-h2: don't refrain from sending an RST_STREAM after another one
  * BUG/MEDIUM: fd: Always reset the polled_mask bits in fd_dodelete().
  * BUG/MEDIUM: proxy: Make sure to destroy the stream on upgrade from TCP to H2
  * BUG/MEDIUM: mux-h2: split the stream's and connection's window sizes
  * BUG/MEDIUM: mux-h2: unbreak receipt of large DATA frames
  * BUG/MINOR: stream-int: also update analysers timeouts on activity
  * BUG/MAJOR: http/sample: use a static buffer for raw -&gt; htx conversion
  * BUG/MEDIUM: lb-chash: Ensure the tree integrity when server weight is increased
  * MINOR: wdt: also consider that waiting in the thread dumper is normal
  * BUG/MINOR: debug: fix a small race in the thread dumping code</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1566302401">- enable verbose make output</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1566302402">- enable prometheus exporter</changelog>
</package>
<package pkgid="2410bd3ca77784585081844d0340bed6ea6e95110823e439f203e68c046f14b3" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.0.5+git0.d905f49a" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
  <changelog author="kgronlund@suse.com" date="1545048000">- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102)
  * DOC: Update configuration doc about the maximum number of stick counters.
  * BUG: dns: Fix off-by-one write in dns_validate_dns_response()
  * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_read_name()
  * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name
  * DOC: refer to check-sni in the documentation of sni
  * DOC: clarify that check-sni needs an argument.
  * MINOR: servers: Free [idle|safe|priv]_conns on exit.
  * MINOR: stats: report the number of active jobs and listeners in "show info"
  * BUG/MINOR: mux-h2: advertise a larger connection window size
  * BUG/MINOR: mux-h2: refrain from muxing during the preface
  * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation
  * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR.
  * BUG/MINOR: lb-map: fix unprotected update to server's score
  * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed
  * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name
  * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id
  * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field
  * BUG/MINOR: config: Copy default error messages when parsing of a backend starts
  * BUG/MEDIUM: Make sure stksess is properly aligned.
  * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn
  * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe
  * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer
  * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic
  * BUG/MINOR: only mark connections private if NTLM is detected
  * DOC: cache: Missing information about "total-max-size"
  * BUG/MINOR: ssl: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Crashes with "total-max-size" &gt; 2047(MB).
  * BUG/MEDIUM: h2: Close connection if no stream is left an GOAWAY was sent.
  * BUG/MEDIUM: pools: Fix the usage of mmap()) with DEBUG_UAF.
  * DOC: fix reference to map files in MAINTAINERS
  * MINOR: peers: use defines instead of enums to appease clang.
  * MINOR: cfgparse: Write 130 as 128 as 0x82 and 0x80.
  * MINOR: server: Use memcpy() instead of strncpy().
  * CLEANUP: stick-tables: Remove unneeded double (()) around conditional clause
  * MINOR: lua: all functions calling lua_yieldk() may return
  * BUG/MEDIUM: threads: make sure threads_want_sync is marked volatile
  * BUG/MEDIUM: threads: fix thread_release() at the end of the rendez-vous point
  * BUG/MEDIUM: stream: don't crash on out-of-memory
  * BUG/MEDIUM: mworker: segfault receiving SIGUSR1 followed by SIGTERM.
  * BUG/MINOR: checks: queues null-deref
  * BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.
  * MEDIUM: ssl: add support for ciphersuites option for TLSv1.3
  * BUG/MEDIUM: buffers: Make sure we don't wrap in buffer_insert_line2/replace2.
  * BUG/MINOR: backend: check that the mux installed properly
  * BUG/MINOR: connection: avoid null pointer dereference in send-proxy-v2
  * DOC: clarify force-private-cache is an option
  * MINOR: threads: Make sure threads_sync_pipe is initialized before using it.</changelog>
  <changelog author="kgronlund@suse.com" date="1547121600">- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615):
  * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used
  * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred
  * BUG/MINOR: lua: bad args are returned for Lua actions
  * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything
  * BUG/MEDIUM: cli: make "show sess" really thread-safe
  * MINOR: stream/cli: report more info about the HTTP messages on "show sess all"
  * MINOR: stream/cli: fix the location of the waiting flag in "show sess all"
  * MINOR: lb: allow redispatch when using consistent hash
  * BUG/MEDIUM: server: Also copy "check-sni" for server templates.
  * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max
  * MINOR: mux-h2: only increase the connection window with the first update
  * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify()
  * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error
  * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response()
  * BUG/MINOR: logs: leave startup-logs global and not per-thread</changelog>
  <changelog author="kgronlund@suse.com" date="1549886400">- Update to version 1.8.19~git0.ebf033b4:
  * [RELEASE] Released version 1.8.19
  * BUG/MINOR: config: Reinforce validity check when a process number is parsed
  * BUG/MAJOR: stream: avoid double free on unique_id
  * BUG/MAJOR: spoe: Don't try to get agent config during SPOP healthcheck
  * BUG/MEDIUM: server: initialize the idle conns list after parsing the config
  * BUG/MEDIUM: spoe: initialization depending on nbthread must be done last
  * BUG/MINOR: lua: initialize the correct idle conn lists for the SSL sockets
  * BUG/MINOR: spoe: do not assume agent-&gt;rt is valid on exit
  * DOC: ssl: Stop documenting ciphers example to use
  * DOC: ssl: Clarify when pre TLSv1.3 cipher can be used
  * [RELEASE] Released version 1.8.18
  * BUG/MINOR: config: make sure to count the error on incorrect track-sc/stick rules
  * BUG/MAJOR: spoe: verify that backends used by SPOE cover all their callers' processes
  * BUG/MAJOR: config: verify that targets of track-sc and stick rules are present
  * BUG/MINOR: config: fix bind line thread mask validation
  * BUG/MEDIUM: stream: Don't forget to free s-&gt;unique_id in stream_free().
  * BUG/MEDIUM: mux-h2: do not close the connection on aborted streams
  * MINOR: connstream: have a new flag CS_FL_KILL_CONN to kill a connection
  * MINOR: stream-int: add a new flag to mention that we want the connection to be killed
  * MINOR: stream-int: expand the flags to 32-bit
  * BUG/MEDIUM: mux-h2: wait for the mux buffer to be empty before closing the connection
  * BUG/MEDIUM: mux-h2: make sure never to send GOAWAY on too old streams
  * BUG/MEDIUM: mux-h2: fix two half-closed to closed transitions
  * BUG/MEDIUM: mux-h2: wake up flow-controlled streams on initial window update
  * MINOR: xref: Add missing barriers.
  * BUG/MINOR: stream: don't close the front connection when facing a backend error
  * SCRIPTS: add the issue tracker URL to the announce script
  * SCRIPTS: add the slack channel URL to the announce script
  * BUG/MINOR: deinit: tcp_rep.inspect_rules not deinit, add to deinit
  * BUG/MINOR: spoe: corrected fragmentation string size
  * DOC: nbthread is no longer experimental.
  * BUG/MINOR: hpack: return a compression error on invalid table size updates
  * BUG/MINOR: mux-h2: make it possible to set the error code on an already closed stream
  * BUG/MINOR: mux-h2: headers-type frames in HREM are always a connection error
  * BUG/MINOR: mux-h2: CONTINUATION in closed state must always return GOAWAY
  * MINOR: h2: declare new sets of frame types
  * MINOR: h2: add a bit-based frame type representation
  * DOC: mention the effect of nf_conntrack_tcp_loose on src/dst
  * BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages
  * BUG/MINOR: check: Wake the check task if the check is finished in wake_srv_chk()
  * BUG/MINOR: server: don't always trust srv_check_health when loading a server state
  * BUG/MINOR: stick_table: Prevent conn_cur from underflowing
  * BUG/MINOR: backend: BE_LB_LKUP_CHTREE is a value, not a bit
  * BUG/MINOR: backend: balance uri specific options were lost across defaults
  * BUG/MINOR: backend: don't use url_param_name as a hint for BE_LB_ALGO_PH
  * BUG/MEDIUM: ssl: missing allocation failure checks loading tls key file
  * DOC: Be a bit more explicit about allow-0rtt security implications.
  * BUG/MEDIUM: ssl: Disable anti-replay protection and set max data with 0RTT.
  * BUG/MAJOR: cache: fix confusion between zero and uninitialized cache key
  * DOC: http-request cache-use / http-response cache-store expects cache name</changelog>
  <changelog author="kgronlund@suse.com" date="1556884800">- Update to version 1.8.20~git0.6fb9fadc:
  * [RELEASE] Released version 1.8.20
  * BUG/MINOR: spoe: Don't systematically wakeup SPOE stream in the applet handler
  * BUG/MINOR: da: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MINOR: 51d: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MEDIUM: thread/http: Add missing locks in set-map and add-acl HTTP rules
  * BUG/MINOR: acl: properly detect pattern type SMP_T_ADDR
  * BUG/MEDIUM: maps: only try to parse the default value when it's present
  * BUG/MAJOR: http_fetch: Get the channel depending on the keyword used
  * MINOR: skip get_gmtime where tm is unused
  * BUILD/MINOR: listener: Silent a few signedness warnings.
  * BUG/MEDIUM: listener: make sure the listener never accepts too many conns
  * BUG/MEDIUM: listener: use a self-locked list for the dequeue lists
  * MAJOR: listener: do not hold the listener lock in listener_accept()
  * BUG/MEDIUM: list: fix incorrect pointer unlocking in LIST_DEL_LOCKED()
  * BUG/MEDIUM: list: fix again LIST_ADDQ_LOCKED
  * BUG/MEDIUM: list: correct fix for LIST_POP_LOCKED's removal of last element
  * MINOR: list: make the delete and pop operations idempotent
  * BUG/MEDIUM: list: add missing store barriers when updating elements and head
  * BUG/MEDIUM: list: fix LIST_POP_LOCKED's removal of the last pointer
  * BUG/MEDIUM: list: fix the rollback on addq in the locked liss
  * BUG/MEDIUM: lists: Properly handle the case we're removing the first elt.
  * MINOR: lists: Implement locked variations.
  * BUG/MINOR: threads: fix the process range of thread masks
  * BUG/MEDIUM: spoe: Return an error if nothing is encoded for fragmented messages
  * BUG/MEDIUM: spoe: Queue message only if no SPOE applet is attached to the stream
  * BUG/MEDIUM: pattern: assign pattern IDs after checking the config validity
  * BUILD: connection: fix naming of ip_v field
  * BUILD: use inttypes.h instead of stdint.h
  * BUG/MEDIUM: peers: fix a case where peer session is not cleanly reset on release.
  * MINOR: cli: start addresses by a prefix in 'show cli sockets'
  * BUG/MINOR: cli: correctly handle abns in 'show cli sockets'
  * BUILD: Makefile: disable shared cache on AIX 5.1
  * BUILD: makefile: add _LINUX_SOURCE_COMPAT to build on AIX-51
  * BUILD: makefile: fix build of IPv6 header on aix51
  * MINOR: tools: make memvprintf() never pass a NULL target to vsnprintf()
  * BUILD: makefile: work around an old bug in GNU make-3.80
  * BUG/MAJOR: checks: segfault during tcpcheck_main
  * DOC: The option httplog is no longer valid in a backend.
  * BUG/MEDIUM: ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites
  * BUG/MINOR: http/counters: fix missing increment of fe-&gt;srv_aborts
  * BUG/MAJOR: stats: Fix how huge POST data are read from the channel
  * BUG/MAJOR: spoe: Fix initialization of thread-dependent fields
  * BUG/MEDIUM: threads/fd: do not forget to take into account epoll_fd/pipes
  * MEDIUM: threads: Use __ATOMIC_SEQ_CST when using the newer atomic API.
  * BUG/MINOR: ssl: fix warning about ssl-min/max-ver support
  * BUG/MEDIUM: 51d: fix possible segfault on deinit_51degrees()
  * BUG/MEDIUM: logs: Only attempt to free startup_logs once.
  * BUG/MINOR: listener: keep accept rate counters accurate under saturation
  * BUG/MAJOR: listener: Make sure the listener exist before using it.</changelog>
  <changelog author="kgronlund@suse.com" date="1560772800">- Update to version 2.0.0~git0.ba23630a:
  - new internal native HTTP representation called HTX, was already in 1.9
    and is now enabled by default in 2.0 ;
  - end-to-end HTTP/2 support including trailers and continuation frames,
    as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using
    the H2 preface;
  - server connection pooling and more advanced reuse, with ALPN protocol
    negotiation (already in 1.9) ;
  - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers
    as well as on the frontend ;
  - much more scalable multi-threading, which is even enabled by default on
    platforms where it was successfully tested ; by default, as many threads
    are started as the number of CPUs haproxy is allowed to run on. This
    removes a lot of configuration burden in VMs and containers ;
  - automatic maxconn setting for the process and the frontends, directly
    based on the number of available FDs (easier configuration in containers
    and with systemd) ;
  - logging to stdout for use in containers and systemd (already in 1.9).
    Logs can now provide micro-second resolution for some events ;
  - peers now support SSL, declaration of multiple stick-tables directly in
    the peers section, and synchronization of server names, not just IDs ;
  - In master-worker mode, the master process now exposes its own CLI and
    can communicate with all other processes (including the stopping ones),
    even allowing to connect to their CLI and check their state. It is also
    possible to start some sidecar programs and monitor them from the master,
    and the master can automatically kill old processes that survived too
    many reloads ;
  - the incoming connections are load-balanced between all threads depending
    on their load to minimize the processing time and maximize the capacity
    (already in 1.9) ;
  - the SPOE connection load-balancing was significantly improved in order
    to reduce high percentiles of SPOA response time (already in 1.9) ;
  - the "random" load balancing algorithm and a power-of-two-choices variant
    were introduced ;
  - statistics improvements with per-thread counters for certain things, and
    a prometheus exporter for all our statistics;
  - lots of debugging help, it's easier to produce a core dump, there are
    new commands on the CLI to control various things, there is a watchdog
    to fail cleanly when a thread deadlock or a spinning task are detected,
    so overall it should provide a better experience in field and less
    round trips between users and developers (hence less stress during an
    incident).
  - all 3 device detection engines are now compatible with multi-threading
    and can be build-tested without any external dependencies ;
  - "do-resolve" http-request action to perform a DNS resolution on any,
    sample, and resolvers now support relying on /etc/resolv.conf to match
    the local resolver ;
  - log sampling and balancing : it's now possible to send 1 log every 10
    to a server, or to spread the logging load over multiple log servers;
  - a new SPOA agent (spoa_server) allows to interface haproxy with Python
    and Lua programs ;
  - support for Solaris' event ports (equivalent of kqueue or epoll) which
    will significantly improve the performance there when dealing with
    numerous connections ;
  - some warnings are now reported for some deprecated options that will
    be removed in 2.1. Since 2.0 is long term supported, there's no
    emergency to convert them, however if you see these warnings, you
    need to understand that you're among their extremely rare users and
    just because of this you may be taking risks by keeping them ;
  - A new SOCKS4 server-side layer was provided ; it allows outgoing
    connections to be forwarded through a SOCKS4 proxy (such as ssh -D).
  - priority- and latency- aware server queues : it is possible now to
    assign priorities to certain requests and/or to give them a time
    bonus or penalty to refine control of the traffic and be able to
    engage on SLAs.
  - internally the architecture was significantly redesigned to allow to
    further improve performance and make it easier to implement protocols
    that span over multiple layers (such as QUIC). This work started in
    1.9 and will continue with 2.1.
  - the I/O, applets and tasks now share the same multi-threaded scheduler,
    giving a much better responsiveness and fairness between all tasks as
    is visible with the CLI which always responds instantly even under
    extreme loads (started in 1.9) ;
  - the internal buffers were redesigned to ease zero-copy operations, so
    that it is possible to sustain a high bandwidth even when forwarding
    HTTP/1 to/from HTTP/2 (already in 1.9) ;</changelog>
  <changelog author="mrueckert@suse.de" date="1560859200">- Update to version 2.0.0~git6.41dc8432:
  * BUG/MEDIUM: htx: Fully update HTX message when the block value is changed
  * MINOR: htx: Add the function htx_change_blk_value_len()
  * BUG/MEDIUM: compression: Set Vary: Accept-Encoding for compressed responses
  * BUG/MINOR: mux-h1: Add the header connection in lower case in outgoing messages
  * BUG/MINOR: lua/htx: Make txn.req_req_* and txn.res_rep_* HTX aware
  * BUG/MEDIUM: h2/htx: Update data length of the HTX when the cookie list is built</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560859201">- allow the new master socket path in the apparmor profile</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561896000">- Correct version line, which should be 2.0.0+git6.</changelog>
  <changelog author="kgronlund@suse.com" date="1562673600">- Update to version 2.0.1+git27.5db881ff:
  * BUG/MINOR: ssl: revert empty handshake detection in OpenSSL &lt;= 1.0.2
  * BUG/MEDIUM: servers: Don't forget to set srv_cs to NULL if we can't reuse it.
  * BUG/MEDIUM: stream-int: Don't rely on CF_WRITE_PARTIAL to unblock opposite si
  * MINOR: stream-int: Factorize processing done after sending data in si_cs_send()
  * BUG/MINOR: mux-h1: Don't process input or ouput if an error occurred
  * BUG/MEDIUM: mux-h1: Handle TUNNEL state when outgoing messages are formatted
  * BUG/MEDIUM: lb_fas: Don't test the server's lb_tree from outside the lock
  * BUG/MEDIUM: http/applet: Finish request processing when a service is registered
  * MINOR: action: Add the return code ACT_RET_DONE for actions
  * BUG/MINOR: contrib/prometheus-exporter: Don't try to add empty data blocks
  * MINOR: server: Add "no-tfo" option.
  * BUG/MEDIUM: sessions: Don't keep an extra idle connection in sessions.
  * BUG/MEDIUM: servers: Authorize tfo in default-server.
  * BUG/MEDIUM: connections: Make sure we're unsubscribe before upgrading the mux.
  * BUG/MINOR: contrib/prometheus-exporter: Respect the reserve when data are sent
  * BUG/MINOR: hlua/htx: Respect the reserve when HTX data are sent
  * BUG/MEDIUM: channel/htx: Use the total HTX size in channel_htx_recv_limit()
  * BUG/MINOR: hlua: Don't use channel_htx_recv_max()
  * BUG/MINOR: contrib/prometheus-exporter: Don't use channel_htx_recv_max()
  * BUG/MEDIUM: checks: Make sure the tasklet won't run if the connection is closed.
  * BUG/MEDIUM: connections: Always call shutdown, with no linger.
  * BUG/MINOR: mux-h1: Don't return the empty chunk on HEAD responses
  * BUG/MINOR: mux-h1: Skip trailers for non-chunked outgoing messages
  * BUG/MEDIUM: checks: unblock signals in external checks
  * BUG/MEDIUM: mux-h1: Always release H1C if a shutdown for writes was reported
  * BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL.
  * BUG/MINOR: mworker/cli: don't output a \n before the response
  * BUG/MINOR: mux-h1: Make format errors during output formatting fatal
  * BUG/MEDIUM: mux-h1: Use buf_room_for_htx_data() to detect too large messages
  * BUG/MEDIUM: proto_htx: Don't add EOM on 1xx informational messages
  * BUG/MINOR: log: Detect missing sampling ranges in config
  * BUG/MINOR: memory: Set objects size for pools in the per-thread cache
  * BUG/MAJOR: mux-h1: Don't crush trash chunk area when outgoing message is formatted
  * BUG/MINOR: htx: Save hdrs_bytes when the HTX start-line is replaced
  * BUG/MEDIUM: ssl: Don't do anything in ssl_subscribe if we have no ctx.
  * BUG/MEDIUM: connections: Always add the xprt handshake if needed.
  * BUG/MEDIUM: stream_interface: Don't add SI_FL_ERR the state is &lt; SI_ST_CON.
  * BUG/MINOR: spoe: Fix memory leak if failing to allocate memory
  * BUG/MEDIUM: mworker/cli: command pipelining doesn't work anymore
  * BUG/MEDIUM: mworker: don't call the thread and fdtab deinit
  * BUG/MINOR: mworker-prog: Fix segmentation fault during cfgparse
  * BUG/MAJOR: sample: Wrong stick-table name parsing in "if/unless" ACL condition.
  * BUG/MEDIUM: lb_fwlc: Don't test the server's lb_tree from outside the lock
  * BUG/MEDIUM: mux-h2: Remove the padding length when a DATA frame size is checked
  * BUG/MEDIUM: mux-h2: Reset padlen when several frames are demux</changelog>
  <changelog author="kgronlund@suse.com" date="1564488000">- Update to version 2.0.3+git14.0ff395c1 (bsc#1142529) (CVE-2019-14241):
  * BUG/MAJOR: queue/threads: avoid an AB/BA locking issue in process_srv_queue()
  * BUG/MINOR: htx: Fix free space addresses calculation during a block expansion
  * BUG/MINOR: hlua: Only execute functions of HTTP class if the txn is HTTP ready
  * MINOR: hlua: Add a flag on the lua txn to know in which context it can be used
  * MINOR: hlua: Don't set request analyzers on response channel for lua actions
  * BUG/MEDIUM: hlua: Check the calling direction in lua functions of the HTTP class
  * BUG/MINOR: hlua/htx: Reset channels analyzers when txn:done() is called
  * DOC: improve the wording in CONTRIBUTING about how to document a bug fix
  * BUG/MINOR: log: make sure writev() is not interrupted on a file output
  * BUG/MEDIUM: streams: Don't switch the SI to SI_ST_DIS if we have data to send.
  * BUG/MEDIUM: lb-chash: Fix the realloc() when the number of nodes is increased
  * BUILD: threads: add the definition of PROTO_LOCK
  * BUG/MINOR: proxy: always lock stop_proxy()
  * BUG/MEDIUM: protocols: add a global lock for the init/deinit stuff
  * [RELEASE] Released version 2.0.3
  * BUG/CRITICAL: http_ana: Fix parsing of malformed cookies which start by a delimiter
  * BUG/MINOR: http_htx: Support empty errorfiles
  * BUG/MINOR: http_ana: Be sure to have an allocated buffer to generate an error
  * BUG/MEDIUM: tcp-checks: do not dereference inexisting conn_stream
  * BUG/MINOR: mux-h1: Close server connection if input data remains in h1_detach()
  * BUG/MEDIUM: mux-h1: Trim excess server data at the end of a transaction
  * BUG/MINOR: checks: do not exit tcp-checks from the middle of the loop
  * BUG/MINOR: session: Send a default HTTP error if accept fails for a H1 socket
  * BUG/MINOR: session: Emit an HTTP error if accept fails only for H1 connection
  * BUG/MINOR: debug: Remove flags CO_FL_SOCK_WR_ENA/CO_FL_SOCK_RD_ENA
  * DOC: htx: Update comments in HTX files
  * BUG/MINOR: hlua: Make the function txn:done() HTX aware
  * BUG/MINOR: cache/htx: Make maxage calculation HTX aware
  * BUG/MINOR: http_htx: Initialize HTX error messages for TCP proxies
  * BUG/MINOR: http_fetch: Fix http_auth/http_auth_group when called from TCP rules
  * BUG/MINOR: backend: do not try to install a mux when the connection failed
  * BUG/MEDIUM: http/htx: unbreak option http_proxy
  * BUG/MEDIUM: checks: Don't attempt to receive data if we already subscribed.
  * BUG/MINOR: dns: remove irrelevant dependency on a client connection
  * [RELEASE] Released version 2.0.2
  * BUG/MEDIUM: threads: cpu-map designating a single thread/process are ignored
  * BUG/MEDIUM: tcp-check: unbreak multiple connect rules again
  * BUG/MINOR: mux-pt: do not pretend there's more data after a read0
  * BUG/MEDIUM: streams: Don't redispatch with L7 retries if redispatch isn't set.
  * BUG/MEDIUM: streams: Don't give up if we couldn't send the request.
  * BUG/MINOR: mux-h1: Correctly report Ti timer when HTX and keepalives are used
  * BUG/MEDIUM: mux-h1: Don't release h1 connection if there is still data to send
  * BUG/MAJOR: listener: fix thread safety in resume_listener()
  * MINOR: task: introduce work lists
  * BUG/MEDIUM: servers: Fix a race condition with idle connections.
  * DOC: Fix typos and grammer in configuration.txt
  * BUG/MEDIUM: da: cast the chunk to string.
  * BUG/MEDIUM: checks: Don't attempt to read if we destroyed the connection.
  * BUG/MINOR: server: Be really able to keep "pool-max-conn" idle connections
  * BUG/MEDIUM: fd/threads: fix excessive CPU usage on multi-thread accept</changelog>
  <changelog author="mrueckert@suse.de" date="1566302400">- Update to version 2.0.5+git0.d905f49a:
  * [RELEASE] Released version 2.0.5
  * BUG/MEDIUM: mux_pt: Don't call unsubscribe if we did not subscribe.
  * MINOR: fd: make sure to mark the thread as not stuck in fd_update_events()
  * BUG/MINOR: stats: Wait the body before processing POST requests
  * BUG/MEDIUM: lua: Fix test on the direction to set the channel exp timeout
  * BUG/MEDIUM: mux_h1: Don't bother subscribing in recv if we're not connected.
  * BUG/MINOR: Fix prometheus '# TYPE' and '# HELP' headers
  * BUG/MINOR: lua: fix setting netfilter mark
  * BUG/MEDIUM: proxy: Don't use cs_destroy() when freeing the conn_stream.
  * BUG/MEDIUM: proxy: Don't forget the SF_HTX flag when upgrading TCP=&gt;H1+HTX.
  * BUG/MINOR: buffers/threads: always clear a buffer's head before releasing it
  * MINOR: ssl: ssl_fc_has_early should work for BoringSSL
  * BUG/MINOR: ssl: fix 0-RTT for BoringSSL
  * BUG/MEDIUM: stick-table: Wrong stick-table backends parsing.
  * [RELEASE] Released version 2.0.4
  * BUG/MEDIUM: checks: make sure to close nicely when we're the last to speak
  * BUG/MINOR: mux-h2: always reset rcvd_s when switching to a new frame
  * BUG/MINOR: mux-h2: always send stream window update before connection's
  * BUG/MEDIUM: mux-h2: do not recheck a frame type after a state transition
  * BUG/MINOR: mux-h2: do not send REFUSED_STREAM on aborted uploads
  * BUG/MINOR: mux-h2: use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data()
  * BUG/MINOR: mux-h2: don't refrain from sending an RST_STREAM after another one
  * BUG/MEDIUM: fd: Always reset the polled_mask bits in fd_dodelete().
  * BUG/MEDIUM: proxy: Make sure to destroy the stream on upgrade from TCP to H2
  * BUG/MEDIUM: mux-h2: split the stream's and connection's window sizes
  * BUG/MEDIUM: mux-h2: unbreak receipt of large DATA frames
  * BUG/MINOR: stream-int: also update analysers timeouts on activity
  * BUG/MAJOR: http/sample: use a static buffer for raw -&gt; htx conversion
  * BUG/MEDIUM: lb-chash: Ensure the tree integrity when server weight is increased
  * MINOR: wdt: also consider that waiting in the thread dumper is normal
  * BUG/MINOR: debug: fix a small race in the thread dumping code</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1566302401">- enable verbose make output</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1566302402">- enable prometheus exporter</changelog>
</package>
<package pkgid="6ab8c2097aa3a7c53509031467105140eb823505bd3f1f12f14b340ea824a928" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp151.2.3.3"/>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
</package>
<package pkgid="04c0f642ec54244b35bd057a45e56e096f7d075bd6da1c631fd2faf3aa93fe4b" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp151.2.3.3"/>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
</package>
<package pkgid="5232eae644298cdceab632409a1b6fdbaba27892a72737607045a50ff52189d7" name="helm-mirror" arch="src">
  <version epoch="0" ver="0.3.0" rel="lp151.2.3.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="Vicente Zepeda Mas &lt;vzepedamas@suse.com&gt;" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
</package>
<package pkgid="1f0eb0763370b477a75f19c1a4db55d240a96030c1f47d2916e5086fc5c9b229" name="helm-mirror" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="lp151.2.3.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Vicente Zepeda &lt;vzepedamas@suse.com&gt;" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="Daniel Orf &lt;dorf@suse.com&gt;" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="Vicente Zepeda Mas &lt;vzepedamas@suse.com&gt;" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
</package>
<package pkgid="224152ab5f8da0c5929abc976f3da6b0ca6b9ff5b625a121d2803826b89ba576" name="httpie" arch="src">
  <version epoch="0" ver="1.0.3" rel="lp151.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1402833600">- created package (version 0.8.0)</changelog>
  <changelog author="prusnak@opensuse.org" date="1432036800">- updated to 0.9.2</changelog>
  <changelog author="aloisio@gmx.com" date="1437393600">- Fixed SLE11 build</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1443182400">- Add requirement for python-curses</changelog>
  <changelog author="mardnh@gmx.de" date="1502366400">- Fix Url
- Update to version 0.9.8
  * Extended auth plugin API.
  * Added exit status code 7 for plugin errors.
  * Added support for curses-less Python installations.
  * Fixed REQUEST_ITEM arg incorrectly being reported as required.
  * Improved CTRL-C interrupt handling.
  * Added the standard exit status code 130 for keyboard interrupts.
- Update to version 0.9.5
  * Added Python 3 as a dependency for Homebrew installations to ensure some of
    the newer HTTP features work out of the box for macOS users (starting with
    HTTPie 0.9.4.).
  * Added the ability to unset a request header with Header:, and send an empty
    value with Header;.
  * Added --default-scheme &lt;URL_SCHEME&gt; to enable things like $ alias https=
    'http --default-scheme=https.
  * Added -I as a shortcut for --ignore-stdin.
  * Added fish shell completion (located in extras/httpie-completion.fish in
    the Github repo).
  * Updated requests to 2.10.0 so that SOCKS support can be added via pip
    install requests[socks].
  * Changed the default JSON Accept header from application/json to application
    /json, */*.
  * Changed the pre-processing of request HTTP headers so that any leading and
    trailing whitespace is removed.
- Update to version 0.9.4
  * Added Content-Type of files uploaded in multipart/form-data requests
  * Added --ssl=&lt;PROTOCOL&gt; to specify the desired SSL/TLS protocol version to
    use for HTTPS requests.
  * Added JSON detection with --json, -j to work around incorrect Content-Type
  * Added --all to show intermediate responses such as redirects (with --follow
    )
  * Added --history-print, -P WHAT to specify formatting of intermediate
    responses
  * Added --max-redirects=N (default 30)
  * Added -A as short name for --auth-type
  * Added -F as short name for --follow
  * Removed the implicit_content_type config option (use "default_options":
    ["--form"] instead)
  * Redirected stdout doesn't trigger an error anymore when --output FILE is
    set
  * Changed the default --style back to solarized for better support of light
    and dark terminals
  * Improved --debug output
  * Fixed --session when used with --download
  * Fixed --download to trim too long filenames before saving the file
  * Fixed the handling of Content-Type with multiple +subtype parts
  * Removed the XML formatter as the implementation suffered from multiple
    issues
- Update to version 0.9.3
  * Changed the default color --style from solarized to monokai
  * Added basic Bash autocomplete support (need to be installed manually)
  * Added request details to connection error messages
  * Fixed 'requests.packages.urllib3' has no attribute 'disable_warnings'
    errors that occurred in some installations
  * Fixed colors and formatting on Windows
  * Fixed --auth prompt on Windows</changelog>
  <changelog author="mardnh@gmx.de" date="1544616000">- Cleanup package
- Run tests
- Update to version 1.0.2
  * Fixed tests for installation with pyOpenSSL.
  * Removed external URL calls from tests.
- Update to version 1.0.0
  * Added --style=auto which follows the terminal ANSI color styles.
  * Added support for selecting TLS 1.3 via --ssl=tls1.3
  * Added true/false as valid values for --verify
  * (in addition to yes/no) and the boolean value is case-insensitive.
  * Changed the default --style from solarized to auto
  * Fixed default headers being incorrectly case-sensitive.
  * Removed Python 2.6 support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Trim bias from description.</changelog>
  <changelog author="mardnh@gmx.de" date="1544961600">- Add manpage</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1566907200">- Update to version 1.0.3
  * Fix CVE-2019-10751 (HTTPie is volnerable to Open Redirect that
    allows an attacker to write an arbitrary file with supplied
    filename and content to the current directory, by redirecting
    a request from HTTP to a crafted URL pointing to a server in
    his or hers control.</changelog>
</package>
<package pkgid="5e5374da6e089a005b3764e8cdc2ee12ad8a631f03a70616992a2ce32a0cd6d0" name="hwinfo" arch="i586">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="79838ab917803e86c44494b3a3a6b0b86b73fb9142ef6710771434ed77395017" name="hwinfo" arch="src">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="d46920e274e3cf115322a8792645a01ad55fb330177f7cf36d5bf964fad0a00d" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="651dcb67587c9cbcead21f56b0d27663ca63062de6798fbff6cc932dc0290d64" name="hwinfo-devel" arch="i586">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="0a3d30c4c81dadc62bcf66e5095f6123ae07984db00748a3d16a4ae7491ccd69" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="b4a80beef145bb3f0e20c3f11a9ba6707d1a6d027c7e9d70241ccde8e6c1d6ff" name="ibacm" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="cb96bd25832e49673b9feb1c252b339471b8b4bbe119ef6ec5e200497b17fb03" name="ibacm" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="61921e4773c6e5516a674b15cbae45819ca461cf2395394b878311de5b2a55c2" name="ibus" arch="i586">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="60576941818e8f1b4b5783f1ce469f81b3d43796024cfafecb1f7410e5f3c005" name="ibus" arch="src">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="c28abc6c8f0f743194f44da9d6df3f250a87e66fc119b94fa3453796d7491fcd" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="e820a1b629b3f8327acf8c91c8d63ca339fa6a61d7252f29e0875ff13f8cf026" name="ibus-devel" arch="i586">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="0217fa29ddb7590067bd8b7daf11c665f98c7226bc2422a70a6fa4654bf6e4b3" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="958d7437eb3afe2aeb891a00e8f8082c05e74925772a3e13cb8e469efcf022a8" name="ibus-gtk" arch="i586">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="3ab8acbaefbfbaff9e72989d51c5230846216dba33bdca6e961c4e650363852d" name="ibus-gtk" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="1c55ffe1aae3eab3f1bcabc28e9134356efaa13a61e4d1139512d5a65e61732e" name="ibus-gtk-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="be51bf6bf245e1ed69eacde89e90a66516bcca61629005c2873cab3a7ccfcfef" name="ibus-gtk3" arch="i586">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="821a861e35e78fb8b8f3a8bd1df7901b4b804910477afd505da5b7f0692f798e" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="e8ea85ff3581d9ffaf60d17fd06d434893745791a2263cc1397c1e6a1381163d" name="ibus-gtk3-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="37d6fd673a9c8a654955742ce4e5692c217572bfccb0389a048db2ac1fbf77e9" name="ibus-lang" arch="noarch">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="7b1da17a685408adae7e7d28fe092baf645474aa20e2939b89775ea471b40f46" name="ibus-libpinyin" arch="src">
  <version epoch="0" ver="1.11.1" rel="lp151.2.3.1"/>
  <changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
  <changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>
  <changelog author="i@marguerite.su" date="1451044800">- update version 1.7.4
  * use pinyin_in_chewing_keyboard method
  * fixes m_bopomofo_keyboard_mapping option
- changes in version 1.7.3
  * use libpinyin 1.2.91
  * add Catalan
  * fix for lua 5.2 API change (luaL_register is deprecated)
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1470830400">- Update to 1.7.92
  * use ibus 1.5.11
  * use libpinyin 1.5.92
  * work around getLookupCursor</changelog>
  <changelog author="hillwood@opensuse.org" date="1470916800">- Fix lua build on openSUSE leap.
  * add ibus-libpinyin-build_lua_5.2.patch</changelog>
  <changelog author="hillwood@opensuse.org" date="1473422400">- Update to 1.8.0
  * use libpinyin 1.6.0</changelog>
  <changelog author="hillwood@opensuse.org" date="1503403200">- Update to 1.9.0
  * change dconf key name to lower case
  * use libpinyin 1.9.91
  * fixes config in setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1504008000">- Update to 1.9.1
  * add sort candidate option to setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Update to 1.9.2
  * fixes pinyin and bopomofo config</changelog>
  <changelog author="hillwood@opensuse.org" date="1520251200">- Update version to 1.9.3
  * Translate input method name in ibus menu
  * Remove phrases.txt</changelog>
  <changelog author="hillwood@opensuse.org" date="1521028800">- Drop ibus-libpinyin-build_lua_5.2.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1526904000">- Update version to 1.10.0
  * bug fixes</changelog>
  <changelog author="hillwood@opensuse.org" date="1539345600">- Update version to 1.10.91
  * Support ime.register_trigger in lua extension
  * Support predicted candidates
  * Support emoji input</changelog>
  <changelog author="qzhao@suse.com" date="1542110400">- Add ibus-libpinyin-fix-build-fault.patch: fix build error for
  edition 1.10 in openSUSE-Leap-15(boo#1115778).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1542456000">- Update version to 1.10.92
  * Fixes Enter handling</changelog>
  <changelog author="qzhao@suse.com" date="1542628800">- Modify ibus-libpinyin.spec: Add python3 compile condition to
  avoid ibus-libpinyin-setup crash in Tumbleweed's mixed
  environment(boo#1116485).</changelog>
  <changelog author="qzhao@suse.com" date="1543579200">- Update ibus-libpinyin.spec: To adapt to tumbleweed's update to
  python3.</changelog>
  <changelog author="hillwood@opensuse.org" date="1550145600">- Update version to 1.11.0
  * Fix keypad decimal
  * Fix emoji candidates
  * Support configurable opencc config
- Drop ibus-libpinyin-fix-build-fault.patch, merged by upstream.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1559304000">- Update version to 1.11.1
  * Use gettext
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor</changelog>
</package>
<package pkgid="76cac8b264a8eac8f2dfaf054eeefb2512d63dd8b4a0e01a7b7521c42c3e5590" name="ibus-libpinyin" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp151.2.3.1"/>
  <changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
  <changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>
  <changelog author="i@marguerite.su" date="1451044800">- update version 1.7.4
  * use pinyin_in_chewing_keyboard method
  * fixes m_bopomofo_keyboard_mapping option
- changes in version 1.7.3
  * use libpinyin 1.2.91
  * add Catalan
  * fix for lua 5.2 API change (luaL_register is deprecated)
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1470830400">- Update to 1.7.92
  * use ibus 1.5.11
  * use libpinyin 1.5.92
  * work around getLookupCursor</changelog>
  <changelog author="hillwood@opensuse.org" date="1470916800">- Fix lua build on openSUSE leap.
  * add ibus-libpinyin-build_lua_5.2.patch</changelog>
  <changelog author="hillwood@opensuse.org" date="1473422400">- Update to 1.8.0
  * use libpinyin 1.6.0</changelog>
  <changelog author="hillwood@opensuse.org" date="1503403200">- Update to 1.9.0
  * change dconf key name to lower case
  * use libpinyin 1.9.91
  * fixes config in setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1504008000">- Update to 1.9.1
  * add sort candidate option to setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Update to 1.9.2
  * fixes pinyin and bopomofo config</changelog>
  <changelog author="hillwood@opensuse.org" date="1520251200">- Update version to 1.9.3
  * Translate input method name in ibus menu
  * Remove phrases.txt</changelog>
  <changelog author="hillwood@opensuse.org" date="1521028800">- Drop ibus-libpinyin-build_lua_5.2.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1526904000">- Update version to 1.10.0
  * bug fixes</changelog>
  <changelog author="hillwood@opensuse.org" date="1539345600">- Update version to 1.10.91
  * Support ime.register_trigger in lua extension
  * Support predicted candidates
  * Support emoji input</changelog>
  <changelog author="qzhao@suse.com" date="1542110400">- Add ibus-libpinyin-fix-build-fault.patch: fix build error for
  edition 1.10 in openSUSE-Leap-15(boo#1115778).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1542456000">- Update version to 1.10.92
  * Fixes Enter handling</changelog>
  <changelog author="qzhao@suse.com" date="1542628800">- Modify ibus-libpinyin.spec: Add python3 compile condition to
  avoid ibus-libpinyin-setup crash in Tumbleweed's mixed
  environment(boo#1116485).</changelog>
  <changelog author="qzhao@suse.com" date="1543579200">- Update ibus-libpinyin.spec: To adapt to tumbleweed's update to
  python3.</changelog>
  <changelog author="hillwood@opensuse.org" date="1550145600">- Update version to 1.11.0
  * Fix keypad decimal
  * Fix emoji candidates
  * Support configurable opencc config
- Drop ibus-libpinyin-fix-build-fault.patch, merged by upstream.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1559304000">- Update version to 1.11.1
  * Use gettext
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor</changelog>
</package>
<package pkgid="383c78a5fa41a55d7acc92d4e9aa96672fa5f27d21914faeaeb5da700318a219" name="ibus-libpinyin" arch="src">
  <version epoch="0" ver="1.11.1" rel="lp151.2.6.1"/>
  <changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
  <changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>
  <changelog author="i@marguerite.su" date="1451044800">- update version 1.7.4
  * use pinyin_in_chewing_keyboard method
  * fixes m_bopomofo_keyboard_mapping option
- changes in version 1.7.3
  * use libpinyin 1.2.91
  * add Catalan
  * fix for lua 5.2 API change (luaL_register is deprecated)
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1470830400">- Update to 1.7.92
  * use ibus 1.5.11
  * use libpinyin 1.5.92
  * work around getLookupCursor</changelog>
  <changelog author="hillwood@opensuse.org" date="1470916800">- Fix lua build on openSUSE leap.
  * add ibus-libpinyin-build_lua_5.2.patch</changelog>
  <changelog author="hillwood@opensuse.org" date="1473422400">- Update to 1.8.0
  * use libpinyin 1.6.0</changelog>
  <changelog author="hillwood@opensuse.org" date="1503403200">- Update to 1.9.0
  * change dconf key name to lower case
  * use libpinyin 1.9.91
  * fixes config in setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1504008000">- Update to 1.9.1
  * add sort candidate option to setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Update to 1.9.2
  * fixes pinyin and bopomofo config</changelog>
  <changelog author="hillwood@opensuse.org" date="1520251200">- Update version to 1.9.3
  * Translate input method name in ibus menu
  * Remove phrases.txt</changelog>
  <changelog author="hillwood@opensuse.org" date="1521028800">- Drop ibus-libpinyin-build_lua_5.2.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1526904000">- Update version to 1.10.0
  * bug fixes</changelog>
  <changelog author="hillwood@opensuse.org" date="1539345600">- Update version to 1.10.91
  * Support ime.register_trigger in lua extension
  * Support predicted candidates
  * Support emoji input</changelog>
  <changelog author="qzhao@suse.com" date="1542110400">- Add ibus-libpinyin-fix-build-fault.patch: fix build error for
  edition 1.10 in openSUSE-Leap-15(boo#1115778).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1542456000">- Update version to 1.10.92
  * Fixes Enter handling</changelog>
  <changelog author="qzhao@suse.com" date="1542628800">- Modify ibus-libpinyin.spec: Add python3 compile condition to
  avoid ibus-libpinyin-setup crash in Tumbleweed's mixed
  environment(boo#1116485).</changelog>
  <changelog author="qzhao@suse.com" date="1543579200">- Update ibus-libpinyin.spec: To adapt to tumbleweed's update to
  python3.</changelog>
  <changelog author="hillwood@opensuse.org" date="1550145600">- Update version to 1.11.0
  * Fix keypad decimal
  * Fix emoji candidates
  * Support configurable opencc config
- Drop ibus-libpinyin-fix-build-fault.patch, merged by upstream.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1559304000">- Update version to 1.11.1
  * Use gettext
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1567598400">- Porting 1.11.1 to SLE:
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor
  * Fix emoji appears in updateCandidates method(boo#1112998).</changelog>
</package>
<package pkgid="00b6eb57de3c6085754bf0a4e767171406a74d77f7295096bbbab6a1533c4da1" name="ibus-libpinyin" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp151.2.6.1"/>
  <changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
  <changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>
  <changelog author="i@marguerite.su" date="1451044800">- update version 1.7.4
  * use pinyin_in_chewing_keyboard method
  * fixes m_bopomofo_keyboard_mapping option
- changes in version 1.7.3
  * use libpinyin 1.2.91
  * add Catalan
  * fix for lua 5.2 API change (luaL_register is deprecated)
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1470830400">- Update to 1.7.92
  * use ibus 1.5.11
  * use libpinyin 1.5.92
  * work around getLookupCursor</changelog>
  <changelog author="hillwood@opensuse.org" date="1470916800">- Fix lua build on openSUSE leap.
  * add ibus-libpinyin-build_lua_5.2.patch</changelog>
  <changelog author="hillwood@opensuse.org" date="1473422400">- Update to 1.8.0
  * use libpinyin 1.6.0</changelog>
  <changelog author="hillwood@opensuse.org" date="1503403200">- Update to 1.9.0
  * change dconf key name to lower case
  * use libpinyin 1.9.91
  * fixes config in setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1504008000">- Update to 1.9.1
  * add sort candidate option to setup dialog</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Update to 1.9.2
  * fixes pinyin and bopomofo config</changelog>
  <changelog author="hillwood@opensuse.org" date="1520251200">- Update version to 1.9.3
  * Translate input method name in ibus menu
  * Remove phrases.txt</changelog>
  <changelog author="hillwood@opensuse.org" date="1521028800">- Drop ibus-libpinyin-build_lua_5.2.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1526904000">- Update version to 1.10.0
  * bug fixes</changelog>
  <changelog author="hillwood@opensuse.org" date="1539345600">- Update version to 1.10.91
  * Support ime.register_trigger in lua extension
  * Support predicted candidates
  * Support emoji input</changelog>
  <changelog author="qzhao@suse.com" date="1542110400">- Add ibus-libpinyin-fix-build-fault.patch: fix build error for
  edition 1.10 in openSUSE-Leap-15(boo#1115778).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1542456000">- Update version to 1.10.92
  * Fixes Enter handling</changelog>
  <changelog author="qzhao@suse.com" date="1542628800">- Modify ibus-libpinyin.spec: Add python3 compile condition to
  avoid ibus-libpinyin-setup crash in Tumbleweed's mixed
  environment(boo#1116485).</changelog>
  <changelog author="qzhao@suse.com" date="1543579200">- Update ibus-libpinyin.spec: To adapt to tumbleweed's update to
  python3.</changelog>
  <changelog author="hillwood@opensuse.org" date="1550145600">- Update version to 1.11.0
  * Fix keypad decimal
  * Fix emoji candidates
  * Support configurable opencc config
- Drop ibus-libpinyin-fix-build-fault.patch, merged by upstream.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1559304000">- Update version to 1.11.1
  * Use gettext
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1567598400">- Porting 1.11.1 to SLE:
  * Add emoji-candidate option (boo#1112998)
  * Fix SuggestionEditor
  * Fix emoji appears in updateCandidates method(boo#1112998).</changelog>
</package>
<package pkgid="0f10f95be184cc4dc49027cc072bb6e5f873aed7acbf80917a9648dc63aec740" name="icewm" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="7ab7c0bd5da59b379c000c237e9dac233f7db6c58b22b997b6f6afdd1c120377" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="a725a8a62c8fbf9e02e9c2584c2fdc67eb6d1362fa216348c7faf2ebb8fe6dc9" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="8bfe96f214764ef9f247cfcc8c259665680cbf69f8d1e071d2e5c9b280e114bb" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="c2d342ab4816dd7571e833c781e5e39922eedfaeb1b8d9a05828752494717264" name="icewm-default" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="360bcc514fe4551b8b51d7020825e089f441c13d3d41b3d6685affd9f945a3ae" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="5b4889212254d065d58889ee520ecbb331c5a9055517ecbc32ddaea6d0abee4c" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="ab5c927eefdb9fd4d9a7fe86d06805a6ca5e4256cf5fe5161dc404accd6d079c" name="icewm-lite" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="0c1477107505073db5cdabb21c17d9496126b0139e4b02b2a933f153fefd18cb" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="b5150b1f94666997b8295e04b4767e630200ccd4efe69c81cf8f659cd9fca258" name="imap" arch="src">
  <version epoch="0" ver="2007e_suse" rel="lp151.4.3.1"/>
  <changelog author="arvin@suse.de" date="1103025600">- updated to version 2004b RC1</changelog>
  <changelog author="arvin@suse.de" date="1106308800">- updated to version 2004c</changelog>
  <changelog author="rommel@suse.de" date="1124712000">- the FreeFork license used by UW says we have to make it clear in the version
  number that we modified the sources; hinted by our license manager</changelog>
  <changelog author="rommel@suse.de" date="1128945600">- version update to imap-2004g (includes fix for Bug #120608)</changelog>
  <changelog author="seife@suse.de" date="1136980800">- add -fstack-protector</changelog>
  <changelog author="schwab@suse.de" date="1137240000">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1138881600">- give libc-client.so a SONAME</changelog>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1145195])</changelog>
</package>
<package pkgid="2b9ee69e8ce29247282fb2cac3a84ddcec97a1b284bc231ced850fbac9fde9f8" name="imap" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="lp151.4.3.1"/>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1145195])</changelog>
</package>
<package pkgid="dbc3981e3180f14cc942ec177b7ed1db8b2e9d458d0fc972ac04e5bc0ff41780" name="imap-devel" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="lp151.4.3.1"/>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1145195])</changelog>
</package>
<package pkgid="fb281c789fb560efbcbe5717e961b63bee98f8d6a55e3690acc3956c010cabec" name="imobiledevice-tools" arch="i586">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="e32a234e013c66d95fdcaf2000ea06eefb345263038d39c08ee7eecf1fb853f5" name="imobiledevice-tools" arch="x86_64">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="8458901d12f83feb5e15858d79f7ca4bf0998cc9eb8445662c1b8b52bcfded92" name="irssi" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="841f5dd8d96f4d66679323fadea96f5ff827d3669940aee1d226fc2f9bae68a6" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="befeabbea03ecd70fafd146d28bc84be55ad807a284ae27cb0b1db554d5f6c8a" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="838784983b053bead862c1e31df2cfc5ef32f99d2c55d2fd555b548521322eb7" name="iscsiuio" arch="i586">
  <version epoch="0" ver="0.7.8.2" rel="lp151.13.3.1"/>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="a32e498c3c0f8125fa73c1566e430b18fa0a00726abe256422845fd545e82ab7" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp151.13.3.1"/>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="13a8c135939342370b47f14287758845c3e27e65242736b7c8db9a4f237a49f0" name="iscsiuio" arch="i586">
  <version epoch="0" ver="0.7.8.2" rel="lp151.13.6.1"/>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571572800">- Set timeout value when querying session info for a single
  session (bsc#1152774), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="fcf085c3eccbd29e2de63e3522b8e90134158a3fc83645d445b3356adcee20dd" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp151.13.6.1"/>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571572800">- Set timeout value when querying session info for a single
  session (bsc#1152774), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="3c32d2bad75c274fd612042829016f85a290f281da742ff26de382f8eb24d8f0" name="iwpmd" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="b99ca4a5f3f0205996be590f64c6435ac797a7dff7f4ed4bbc1bdc335ec67d9a" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="1ea90b7ef1bf1869de56aa20509083825b6e70bd8f65d43440e2d43f856fa263" name="jack" arch="i586">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="b32106dbf405322b55dc3d825b5166e7f90b0c197c72168d4442af7e6de1e8f0" name="jack" arch="src">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="cdenicolo@suse.com" date="1370520000">- license update:  GPL-2.0+ and LGPL-2.1+
  jack server is licensed under GPL-2.0+</changelog>
  <changelog author="dmueller@suse.com" date="1370952000">- add aarch64.patch</changelog>
  <changelog author="ohering@suse.de" date="1399032000">- Enable firewire only for 12.1+ due to lack of libffado-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1411300800">- Update to release 1.9.10
- Removed patches jack-wafdocbuild.patch and aarch64.patch as they
  are now in upstream.
- Upstream changes:
  * Correct JackPortAudioDriver::Open : special case for ASIO drivers.
  * Correct JackEngine::NotifyGraphReorder : graph-order callback now notified after port latencies update.
  * netjack/opus: don't re-init en/decoders.
  * Use string ids in the alsa device list.
  * controlapi: fix double free on master switch.
  * netjack1/netone opus support.
  * netjack1/2 Opus: use only 2bytes for encoded-length.
  * wscript: add header defines and libs for example-clients/netsource.
  * fix duplicate prog.includes.
  * More robust channel mapping handling in JackCoreAudioDriver.
  * Add opus support to NetJack2.
  * jack_control: fix epr command.
  * Update JackCoreAudioDriver and JackCoreAudioAdapter with more recent API.
  * Devin Anderson patch for Jack/CoreMIDI duplicated messages.
  * Fix in ALSA adapter.
  * Fix alsa driver parameter order.
  * Control API: Enforce driver/internal parameter order.
  * Extend jack_control to have parameter reset commands.
  * Align buffers to 32 byte boundaries to allow AVX processing.
  * New jack_get_cycle_times() implementation from Fons Adriennsen.
  * Update waf.
  * [firewire] Introduce UpdateLatencies() in FFADO backend.
  * [firewire] Allow FFADO backend to change the buffer size.
  * Rework JackMessageBuffer.
  * POST_PACKED_STRUCTURE used for jack_latency_range_t type.
  * Remove JACK_32_64 flag, so POST_PACKED_STRUCTURE now always used.
  * Improve libjacknet master mode.
  * In control API, UNIX like sigset_t replaced by more abstract jackctl_sigmask_t * opaque struct.
  * Check server API callback from notification thread.
  * Use a time-out in notification channel write function.
  * Fix lock management in JackEngine.
  * A bit more robust JackMessageBuffer implementation (in progress).
  * Rename JackProcessSync in JackPosixProcessSync.
  * Fix NetJack2 initialisation bug.
  * Improve ShutDown in NetManager.
  * Correct ShutDown in JackInternalClient and JackLibClient.
  * Implement shutdown for in server clients.
  * Better time-out management in NetJack2.
  * More robust server/client protocol.
  * Factorize code the server/client request in JackRequestDecoder class.
  * Cleanup drivers and internals loading code.
  * jackctl_driver_params_parse API moved in public control.h.
  * More general drivers/internals loading model on Windows.
  * Fix library symbols export issue.
  * Adrian Knoth fix in midiseq.c.</changelog>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="eb331a962b9ed97b26fcd33d18e4a742327185962d6023a70694498ac4ccc17e" name="jack" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="8a0b498d1a6b96870cf179ec546fffd3166e19e5267ff19755401b705c7d1027" name="jack-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="beb555d7dc05fe64ace5a51fa2f036a907f76302dc86f9bfd142858b3833e122" name="jasper" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="9f3c5f91dfc4e590e904ec91fd11218f3ecefa3eca01669281851e72d0a5cb11" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="b9dafc1bcb88f6120358c346c03b29af5bc1164491c979fc3ad2206bd341c6ef" name="jasper" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="ecb9df8e88315799df2ee09a8a9de699b4fb240bfe04a9288d9fe4860185fdd4" name="java-10-openjdk" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="729e13d67cfd6be657b0b74d01c60b8e2db3e3671c9b6587270813f145fb3a9a" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="4f00ab385039d8abf42a6499cbfa51b42561a3008851d7e4af80770412f4efdc" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="26b8ba208b7eb0995984e89157821c82a44b34752443619c363aeae63f7ff879" name="java-10-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="e37d24a7e1252222de9bda03a864ec68a69bf26d6031e39b616fb9e56fcf881e" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="b6b8f3d3c5d5551698576f0cd54da4d1b2daf75f13e3c33c9070fdf8d0fd4daa" name="java-10-openjdk-demo" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="51a4da5714e820b8eec23b162498d8eb2205f2b6599b345d9c524d08302f54d1" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="e0448b33cda38f5c1ddc42f28eef07f32e67e45e888f9e54acba9b3de973da34" name="java-10-openjdk-devel" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d15906816dd918c01ddeace351c342d363038dc5a60f3038bac36927dfd44216" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="37b5ce45c9cf2a8696d82910a3484ed28c6c850c12127fe31cebbd55a8ca9884" name="java-10-openjdk-headless" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="1c0a223b5087b8fff18bc74f45875210a516ac1d181cc52df0d6c6bddd3e4170" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="546857c7d8ec787cc3c61f8374ef69b16cc1fb465cb1a6373fee2ed8bc9d41f5" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="4c5d3339b15c03d28bf6a6b4c39b06ad2c1fc8bde950dada7a731556554ebd07" name="java-10-openjdk-jmods" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d6b7b861b064b062cf866ce60bf71a2c1e123e5959cf06c58aa7d858d10331e1" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="fe4a8f1d233e64a2998cc95b80c1e1fabd2dd4e237fc1736f325253e0f10bfad" name="java-10-openjdk-src" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="6cf5d96441d9076bfd94b5e3847edcf330f367ca2f9cb8c05f660980bbc3a111" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="abc1b71dd4baccc9190e545ba2bada8301c8a63b35dd48385c322cdff604090c" name="java-11-openjdk" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="4708868f9521302c7d4920102104a8bf156d4b87ca0d7054c725fe564a8c7726" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="5d02c7860c005fb0f9888d0b6f2e9de4ab5aa4cbe04e0b55c1444d27de49d4fc" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="195fe517d577ff3e4766dae43c18ce265f4e78d1ea8d4f86919b955e852c1d7e" name="java-11-openjdk" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="644a79d30a69bf795abe4035689dd6de5574c07e8de0f89315286f007abff643" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="ec72d9ded978a3d86f2624571e20c9f6efa3468701597dc1eb0fbd4daf138396" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="f367340e4cce301d50b3e53f07130fb9c6aca6a7bed1aaf6022373e124949fcd" name="java-11-openjdk" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="0daacebcef4a294fb4ded24f80ce5276db170596374ad7079910e28aa2f16bd2" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="a2856fd88e44d72ec2e02c6e7b54c9fb22f0b3b9adbc78436af9256710b4d571" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="c9629e23f47ad99777ec245847643d786044349c4a6ac70b0bf600ebef9596fc" name="java-11-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="2938503b77b2a886a7a55a3485f75aabf10c4e12e7d993ba5b4edba33b4d54ee" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="763a22528d465aa32bd660c466e58ea964455892e2a96926cd4142e5e0f76b1e" name="java-11-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="a50d06059a349fc7f369700d240a0cfe2372b49bf7b53af212de02eae475be17" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="d7153ce7181d13d53eb257577b570680ad3b246b51e1074a2db62cce4bb22377" name="java-11-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="1def6ac199c02906e517919d50643a5c3045f32750e6c1f5234258ed4bfdf050" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="621d1a419ddfa771023367c95aae185e360423392e97df6c00003b568e2c5850" name="java-11-openjdk-demo" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0756289fa67214da46955c690c6d772b94024e3e65156c27cb18fb0311b7d022" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="540d5eca015de4dd0e704157b97cdc4adb92cfd2e197d7518847e9e569dfb31d" name="java-11-openjdk-demo" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="bbc21336d8a777d7808e5f9c75e154d4c9953b98f8234fee389cb951f54a65d5" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="197e5f20ea0ffd4b77117aed2724f3881f9d4214e2f6c29c9e5531f599ac8f32" name="java-11-openjdk-demo" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="2e2aca58f1d91863541bec2733320a0156c1b52d83d00b935594361c71089f8c" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="79164acdf15464c0c8ef08f518ee00f5e6f517b6258aadfad6ca376edce4e0c8" name="java-11-openjdk-devel" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0828f96bc19a0e30d8fae471297736323ffa1d6f323d472298e457ef72b5e4d0" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="4fd52a185ca223d8dee4658c46a44f286362b1ffae5bfa6973d0bb179cf1f742" name="java-11-openjdk-devel" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="381eae7ed6ca3273d1cbabc05a9877f53afdcc6ba34a2d9a2dd65dcb1bf66142" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="4f37476ec32402767c858ebf0106fc517fc4d3732cc2496c26f58a6181618430" name="java-11-openjdk-devel" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="5683c4af8fb1843fbb359a2d23dc6f2ec5f5f973e0e3787398101dceba9ef098" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="8de93471ba22722f14e418ec7f52d9c69b13426306ff3d35078635e089efb08f" name="java-11-openjdk-headless" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="f64253ff93414fe70cd1127f44100f4313428a100628dd69fb49750ebea24157" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="e8d74fef058c9b19a59f0e0d691569903a5d24f10d867d0f33f5922c4d35699f" name="java-11-openjdk-headless" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="f1be823fe3a291a09617c411ead326989123b7510bb168e926b8bb32b073c26c" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="5994316e0b33e991a25f2fd42a1997206d9e06dd54065fefd4e322ceac07c832" name="java-11-openjdk-headless" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="c58f8422b51eae03867b38466612747bac53afec296d4c69ecca2a045008df1c" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="6988e3469126d9c9c75fa58646ab117c5ca8cd2fa6e907a976253f9452c32229" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="d11d1dac967d2f247e04ed1800735becd255e8ed6256363b46d4cffc2cbfe49d" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="fd3e5f2e9ef5024c034b796ab8cd6914a049954a877870aeb73684b4181ba965" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="695cb51d2eb81684e90978eac403860505c95f9378a3b402dec391ccc0376e43" name="java-11-openjdk-jmods" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0bf0d9ad25eb72f714e0e45937aa272441dc7fcabf4058f4c8652ad957e9e590" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="8f671a7bb7fc77adc89370a7eedbbf9dad627a528f714e8715f60caa5a525a95" name="java-11-openjdk-jmods" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="a3c982b632fe3d4b829cd9967b8ad37a3b4961af7654e0bbde727d02dd8dd6b9" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="7ef2df8d3ca606bb7889a633d6994fdd98c47d49b70da68c9b89b2db2fdf6051" name="java-11-openjdk-jmods" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="1c16878f452db2b96240da81d3f7d440af8042009f08bc1d16727f556d41b411" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="0adf41d0eb4f8c212349c2fb13bf4277979f5de168f710000a19aadd5c126225" name="java-11-openjdk-src" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="6f449f682a2ee0c1e5cde65426442f55ba7be432d92294ec550f3407fb2aec02" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="bb1c1b5611bd5d7a8d5d446f35550f0f8434a3d79e0888138aac080171b4440a" name="java-11-openjdk-src" arch="i586">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="da27b8fc0a0a82c3f8fcf348d9982ed3949821a593906d6bad07cca693a08ac9" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp151.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="03854e2104c622c684c1191fea227631d9efc43f0b458fadb195a4fd8cf70830" name="java-11-openjdk-src" arch="i586">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="e4e39d16082dc8a436d45b82e54c5c316ad4372db3aec06c54c04926ae4eb9a0" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.5.0" rel="lp151.3.9.2"/>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
</package>
<package pkgid="cfc4b6c6a087abc22cf145c13533407766cae251317dfb7dea813d1965e247bb" name="java-1_8_0-openjdk" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="a33c20bf8bb45620e6087b3084511c15fc3371e3c4ea282b173d8c5cd032d5e0" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="7f1e471dce5bead27e5f7720f12f4a0f8d7bfd54abb23d8cc020e3cc68a5e3a4" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="00ee83f93f111d6a5486703cdb5a218c5f15f89ce67a614d9d350ad1cd56d3a9" name="java-1_8_0-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="99061ffc9e0d7d21f3f512ff671022bfcd04fc1ed424db4d3fd5b3dd717df30f" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="d4025280511564295c5bfb20f7b5623f6d14c4692e084168de3cab3d3f473f9a" name="java-1_8_0-openjdk-demo" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="fcace9312efa849e22075d33175d48629c63f7f28fb196b8ee0a583898652d7a" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="627cb82a5f70d11ede3fec015a54d2f5e2978a55c37186616e902581baad981b" name="java-1_8_0-openjdk-devel" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="a7bd797ff6eb26f5855ff5d166236bdacc96ad6db1733682f0bfa982109551e1" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="caefce2dde8fdfc4bd7ce3ed0c8140d6bbf75cbfb8f9e1d7d1c848f0e824e980" name="java-1_8_0-openjdk-headless" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="d87353662d88eea0bc24908a7a5b48e741a09aef0b7bd3432fa9f4ecd480980d" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="7c38f67cca381f7286cd837f142101a760947415ddec22161e4fbc71db7e49a4" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="a730f52a97b5bb64127764bfce22e65b59aa21cb54de1d28add9771a51a03759" name="java-1_8_0-openjdk-src" arch="i586">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="bed8b5c1254f3f66eeb7812c5a1993818ab6afad03959878de2589aa42ee6ee1" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp151.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="dea214c43082cad55fabdf7d61ef598a1371b0660a9a503c81bac507ba05826c" name="kconf_update5" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="6b9fe072fd08ed2452b41ccf6bad3f4945ecfb54682a9b9ed66c6db651166e39" name="kconf_update5" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="0b7e6f523eba03205e481f967dfd329bc3658c506bce7f3f00f3af5f672f874d" name="kconfig" arch="src">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="b9ca570c0c5379eb20989f99784a9159c8e1eafc02cfe245fe932cdaa98aa47b" name="kconfig-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="55e434d6af73665d3ebb3dda4e29286298cfdba572e23415e440028a0dddfdca" name="kconfig-devel" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="0c1d89481d6cf81801a8b76e03369f1b288f94f1451bbb0c1f47ac8fccc7dc3e" name="kconfig-devel" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="4aa4292133bd53174204b49f53fc9ab8e34cc9821e4addbf009c8532e841ee02" name="kdelibs4" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="ae55881c4284895e7f2da128f3b87bc38c5cb421b43e094ebc1dafec624a64b0" name="kdelibs4" arch="src">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="5ffdcbac52a80e65adfeb019322233866762ebebd26dea21dac919052ca94b44" name="kdelibs4" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="03a66c99333a5ac8381a373dc11d12c3fcb27c2e0d8b7c5845be2ffb777f1428" name="kdelibs4-apidocs" arch="noarch">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add _constraints to fix build on ppc64</changelog>
</package>
<package pkgid="acfda95f6e9f1ca00eab5128d874b274996206cd83983c75ac54beb73afdbe55" name="kdelibs4-apidocs" arch="src">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add _constraints to fix build on ppc64</changelog>
</package>
<package pkgid="79381ea30ad30ba10edfb1473576fb30a03e1f40479ceaf57356151cf7d9cff2" name="kdelibs4-branding-upstream" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="f810b12674a74605f50d6cb2d4505e26f523529968134fdf48e8a0bdb83254de" name="kdelibs4-branding-upstream" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="b7cc1e49c85dbefab00b997e89d8c40e8efb4425885b916b63c5d30c2cdc3c18" name="kdelibs4-core" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="e2bea704c39c46883ce88faab054b466cd3adae7ff09926cef53af3da4bb6d8a" name="kdelibs4-core" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="0aa524c424b0986f5287f1b6d3cbf7eaaa19d1c20ef71e5a837acec054f46cd4" name="kdelibs4-doc" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="3198dfbcf8517d8fc821b583efb69336115ffd8fe9141de117fbb01942242112" name="kdelibs4-doc" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="828cc8dc019b030be1158009d6aaf60c6ee3ea0732bf122060b43c76fbf53f82" name="kdepim-runtime" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="74df6e10baead169143bf583346c17c2f32465d1d722af4ad24366f49c1f105a" name="kdepim-runtime" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="283efb4c6b2bcd5f8ee045df6bfa07a075effe8931710ac65beba3d290344f47" name="kdepim-runtime-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="651ad2db79c72e152afb3556a4fe53aaf52dd5687b6a7947c70553ab7b8c984a" name="keepassxc" arch="src">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="37519c41d707a1197f50fad216b884a2e73afe8bd75316f110c7ed97709f0d94" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="9dcd38924b8384da30b2173d7d5eb1bb182f8210b1e029e659d3dba06decc029" name="keepassxc" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="bae31c51f4528bc73f7f78eb27d1b9293e1b1e22c9a644c4a75591bc0da35772" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="01bc5a267076a3c0238b9e270a6de7994d24806b7d0263f9bb5a241afca1d79f" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="cbae85c8e444cf7487973c0480a85c5c27cdcdcd346c7341d20ef17f0ab5dbbf" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="0f8c27b81837d845414644960526995253e4d623ac64053b2c43cfc6c234129f" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4f64ceae7ec64588791d73ada0a5039958c81a9f7c7cab833fc360da442ea53e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="03671ee8790b8bb66774f65ac8ddd2c5c380684d9f207facef499a870abc2f26" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="03865f88b61a843da280b30c2a2c04dd080364b4ceabb593014ee5ac4a2c50ef" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="2ce64341b58d92f4b0fcac8bc12c58acd8f506ebff7a13f5197268839bd1765c" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="cd99a0cc46ec645b026be905c99dca245cfe4c2c561f11917cc69c1e29bbd52e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="4dc6c3aa1e2e060bed3e4b930d9bab28240415af71e50174cc1c1c3fb350daca" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="b7d8f37f08c3083267c414dbf0a2f0a215f451351c78cb8c2362fac4a7a70956" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="7aaa7751b9b599e04dbec1e812727310d47826830562c4722d91cbb69e2e2113" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="478fac5a479f5e9b2c27d160527773182b55af3c43906c03ee39dc5ace60deda" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="948aa650a4ca2b326374f90f2c232226daa0efaf46dc046a4d33655878efd0a7" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="df606be6f0d7f1db6ecc1476a46eaf66bba8cea782e645ffe3b51bd7071d0aed" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="a2f76e4b6d90e97e88e707b757e5007d80d7c84eccf92e0e6baa1eb44c87bf57" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8d970e4895f9b19d041d0e37b7522f0155c632823c3b026edc1e781fbad75688" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="a8a94849b75133eb34e6d93bd6bdde4e144b61c296c2db61cb9c86dfd90627cb" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="dee8f3dd89631b12b0b6bf0c5b8a58ac1f0bfa6c66aad88711cffe6e16709b22" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="858c827021d13da50ce869353d8dc15c88b39e1c34f5c6c3d7aeff8648813134" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="8f58d9c6f9d98a5b492ead7d05e02029df97ee894b1efd68371553f1e2e90ec1" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="87a216d7043d29fc22731e6f4b73d000861a3493ac1234160ba49145d59dc4fa" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="3f81d14433d3fbb0e5033b0871af22504e9f7ab12f947b7f6a12f04befc800cf" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="a8781fa2f2b0a33a6e519cb60e769880f8f159a54127e3d8aefb99d5cd13851c" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="6fed03583e0b8c54e65d4b6bae101b7e2ff11d246147c2737699107cbd47e257" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="e9a5aab4723356aa1059057bfc74b3d561b15e0598c2a0bed65ede90360b43c1" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="748b0ae629004c5c51e72b7d44b2520f03faf466afc04ed1ac2b3551da83a6bb" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="c3183db5c85d2a15e6016788a1e2cf2b01bcba3e915a8f24a61bed1c81d1b22f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="3a3ed377a2b7aa34726f2776f6e478926117d33290ab127ef2409e8d77adc4b0" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="5d22ddc5e68efa27b1f3de5211c90d60722e5dcd8f3d23d102b1949c83c14fb7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="5c992e1854c6d9c33719fbac5c1bb96d4f98d945bdf5604fb394b3e73f1fc3a7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="2da490a75f21e92dfab69a09c277ea1099f85dd4d7585407c631e05ee5d0c3e7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="ec72e73662263080992a1edec12803a586f14f602762288a1c36c6586a3331f8" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="41d194e491f6eb94845b499fd7b4baafead577719beaec9bd33c2b0d061df349" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="fd55e963c39561e5fc93a235ef56c382fa12077ba7a4301aae268165e4552454" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="2078663b8ee2ad3db9a93a6e842e80a415449497d647ff55a7741f284d0f7df1" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4027fd90fe57ccbdc6a589050750bd00bfddad514b3a64c503967f6e5e207fb8" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="1ba6007a4c7d5d6a8d5007e3e95971d9233da62b2f5240c7839f7336325225c7" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="29cf644c63ef4d952be16f6b4d5646ecc070467b15e70dcec9c126389ebd7d12" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="965cbd2122c833b902795f79ecb78ca770de8ed10a8284170f40db0a25e9bad9" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="f6ba5ba8b37d9b7e66ed463410b91c1eee52d1a55d254014b634dfb9e44cf60f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="6d064b15d102cc960b1bdee39af7fb1a51f30d66180766acde84e52b5126f0b4" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="42cec3f235d6d17b1c711a4cbfba070dca6600257ce55dfd0c0fcd7b47a07a79" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="c3e3ce8866e6c5153046e05ba682664cae5e4b1f852e06215489540c30e85561" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="2f79ea83a066fdd914f765d0273b5d16f8585e83524545d1c7c6a425847c9ca7" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="c2bdf254baa96e40b7ce7f4d02aa3119052ee5950fc55648c5fb8068b14bd29f" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="fdebab54ebb931311a04602561c3b3bcbc0fbd81c8463a9147e6ab39ecc7a373" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="5130492f5a04ec7291feab02edc62bdcc73023fb1a83714c7b074bfa5500d0e3" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="dd5b743107f11cc049be67e5aeae0e45381c268a1c6072eaa4be94ac6447c818" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="928f55bb64fb5f7a54a371a8af461e5150bb4c54dce6cf0e0117f9f1648efe70" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="38fa30a1fffd1e8f8f8282c1ad61474fd6a180b58d82451f7c94ac9a196a766a" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="14a43963555bb7bd58aa0fb3bfbab91e3f9697e54b9965214e87912c96f5f046" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="27b592951c5f8f52069c4e2836c00b4d1a9dc0887d7cfa669cfe41205dfeb098" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="a08d30de0fac0318b5486cdb6264d0f011753387b21407eebf95f0bc5c3d91c3" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="ea31613f065cb8cd42ff3e39258b89dec28cd3792db483ce93b7c22eea52ea27" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="755b1c94d43fba057db4ddbdb541ef99f67f313c706af495fa645aeb4d809a68" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="b9d36427141eb338566c975cb19ddc57344fdd96a0a5cdd9024bbe2f1539a194" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="bda6caae2db2304105a0877f9e0ae2057c1886f39306a785f98f6c319ed0f3d1" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="bc6e4d0ba8ad93bfba24138759b91c07abcad27e2428b50c2cf2f82e95ec126b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="26cb6f2903607909638550e5a4ef3054e2fc341ced9f9423bde4fd02693eb85b" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="f51e47d1247eb46ac2d798966d6bdb15aff042f775afd0619b37c53523ed338f" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="012e4b3cb8d69385bb466f8a413c65cb9e19f96bd4ba0efcca206a65d2a9d2c3" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="bdea13c46f9c2e4503b0a8892e7376b4fb6a07f74b3ee4e4e2b0ee3120e48a66" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="41b90c4b780c8c2fb21e6477fcce709bc4a0c4a05746f95e4517ebd3264685ef" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="2fe90289a4388173309f82eb2302cb1e5fff2290975c87521613904e353ce567" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="50d5e3406137e257bd432c7b5c3e68226dba46f62baa6aa1caa7e1d22731b33a" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5f76334ce5532e4a0692dc9bb47cde646194ded4aa43192a2fe6cf810e06b9fd" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="57c6de140d8069c00e0e2804ebc721d76333508816b43c62f6da405184f76258" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4728e59f95ae3478ab193984464e49ae864b0fea75ed211174ff0e3e464fbbbc" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="a6e836dc8c75c221e8797bdd8ffcd4ab93e74aeaf8010740c767afcf063ce963" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="4a59850ce25afa1c29f2a53d9bfb0fccfc5e4487973689ce8fa9cbe7f80a9511" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="d87478d102d70bd12e74b20b50f4d38b1fd5c8fc225bfa409bf99066a2d93f8e" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="a15246e3e066dbb71cb1417902f050d2066fc6ab8b9932cc535a8f5fafbfd63b" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="fc84074631c0dc15113efaa89c77fcc42ed23728eacc82e848c3b599d68686a8" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="003c2548acd787566a5f0a236cc58f5a97d289b6d6b59503ad6a21f44cef7fab" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="a33d47f837a0024eb06fdc93358631cf905396c0485b9874a131defc1a7f7b09" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="2671b32c48b49b0b7608a55afc54c80d7572f75d7fc8298528663eb4b6795638" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="94c2bd8999310e3801726b0d42328ec8d4790561e358f89a9381f2f97f7f44cb" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="cf1231f7c46673ebfd243ee82693b6fe80c37e7fd8c61e947f90eaa2c8897a25" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="0a3ab9613cc5d617784a6190505ce088bc8149025ce1650a158633058a677755" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="432964ad0286de86af8c263c2ea8063e3a2ff67516f798a95a0d5f27301e55cd" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="4626c0c00e1ef767f96b3ffe2f80d8a0ba074946b1b45a3aa8faa76cea4707ab" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="97f1833f2f64b32c396059975ff0d856c4127582fff6577629bb5ec6897d5ac7" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="9dd49158cb7a46bc831d6622695e4b7d011f67912ee4d95908d56df1c7909b41" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="3518ec6ddc2bb00e060f60d61f47cb1f66ca5c140c7f2d5cd90df04200840154" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="6e12eb35236b9511ef1b81ff43a3edcaf582ce1c7fbca482462999b65d84b760" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="0716639b8da7719bd37a061098926aabafc4b2f0e5de6ffddc934cae32b7ad80" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="4c8f0b0f8dc72b3f523d052ee0febe775b1c7ace80afb11eec7d9f9adc57ccc3" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="19cad48629aac3588bb489d30e49a7229985f8af6555ef9ccf535389b60e982d" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="bae66515917cec0796d7f5085d133523eafc2c24ef77dac16547483ceea7169f" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="fbb8221483bd9b02385c7572d3ed855896b030a82aafdc4eb881d748d6385789" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="23dfb409db79b313a7bb68139daa7e0cc463472b6ec2e22a3adb71c88287a320" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4e78c1c69a499d24b5abd470a8f982527fe6ed15f3d27ca25c72f35a1c89a0ee" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="bc800f4dddfe7c1451bbc9a5df09138dac9cd8f100c46e26d226377f0e941dca" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="c9d7f2048527b8b1e98a26bb2d9e225813d98412041cf6bb3690c07478ef277b" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="524f3c2a38fef4787b666ff6bc0a99765e4a3e91521f295a03a2e61982fb340d" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="fe9e6b5c38e4b84b2a1ca7f8cae76df6d393c336208e53cdd5348bad0451e42a" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="a1611b5b7eb3fcb3b59444618ae0b22df7710dd1f45b4b93a842fce180cfa6a9" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8113678d82f2082f3edf558d5d0824afac628e82f8e6dcfb1567da5079019795" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d02b48a82fc7f31c5f273885e882c00bc0327203e3d2147610f8893ae0ef2bfe" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20190312" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Update to version 20180606:
  * brcm: update firmware for bcm4356 pcie
  * brcm: update firmware for bcm4354 sdio
  * brcm: update firmware for bcm43362 sdio
  * brcm: update firmware for bcm43340 sdio
  * brcm: update firmware for bcm43430 sdio
  * Update Cypress license termination clause
  * amdgpu: update vega10 VCE firmware to version 55.3
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0)
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qcom: add venus firmware files for v5.2
  * linux-firmware: liquidio: update vswitch firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 20180717:
  * amdgpu: update copyright date
  * amdgpu: add initial VegaM firmware
  * amdgpu: sync up vega10 firmware with 18.20 release
  * amdgpu: sync up raven firmware with 18.20 release
  * amdgpu: sync up polaris12 firmware with 18.20 release
  * amdgpu: sync up polaris11 firmware with 18.20 release
  * amdgpu: sync up polaris10 firmware with 18.20 release
  * amdgpu: sync up verde firmware with 18.20 release
  * amdgpu: sync up pitcairn firmware with 18.20 release
  * amdgpu: sync up tahiti firmware with 18.20 release
  * amdgpu: sync up oland firmware with 18.20 release
  * amdgpu: sync up hainan firmware with 18.20 release
  * amdgpu: sync up kaveri firmware with 18.20 release
  * amdgpu: sync up mullins firmware with 18.20 release
  * amdgpu: sync up kabini firmware with 18.20 release
  * amdgpu: sync up hawaii firmware with 18.20 release
  * amdgpu: sync up bonaire firmware with 18.20 release
  * WHENCE: Fix typo Version
  * cxgb4: update firmware to revision 1.20.8.0</changelog>
  <changelog author="tiwai@suse.de" date="1532001600">- Remove useless check_whence.py that leads to unnecessary python
  dependency (bsc#1101818);
  also removing the python3 hack at prep, too</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
</package>
<package pkgid="97f2ee54e36b558580205d0a49104f073632bc927a61000193cad7fa492f4d53" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20190312" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Update to version 20180606:
  * brcm: update firmware for bcm4356 pcie
  * brcm: update firmware for bcm4354 sdio
  * brcm: update firmware for bcm43362 sdio
  * brcm: update firmware for bcm43340 sdio
  * brcm: update firmware for bcm43430 sdio
  * Update Cypress license termination clause
  * amdgpu: update vega10 VCE firmware to version 55.3
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0)
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qcom: add venus firmware files for v5.2
  * linux-firmware: liquidio: update vswitch firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 20180717:
  * amdgpu: update copyright date
  * amdgpu: add initial VegaM firmware
  * amdgpu: sync up vega10 firmware with 18.20 release
  * amdgpu: sync up raven firmware with 18.20 release
  * amdgpu: sync up polaris12 firmware with 18.20 release
  * amdgpu: sync up polaris11 firmware with 18.20 release
  * amdgpu: sync up polaris10 firmware with 18.20 release
  * amdgpu: sync up verde firmware with 18.20 release
  * amdgpu: sync up pitcairn firmware with 18.20 release
  * amdgpu: sync up tahiti firmware with 18.20 release
  * amdgpu: sync up oland firmware with 18.20 release
  * amdgpu: sync up hainan firmware with 18.20 release
  * amdgpu: sync up kaveri firmware with 18.20 release
  * amdgpu: sync up mullins firmware with 18.20 release
  * amdgpu: sync up kabini firmware with 18.20 release
  * amdgpu: sync up hawaii firmware with 18.20 release
  * amdgpu: sync up bonaire firmware with 18.20 release
  * WHENCE: Fix typo Version
  * cxgb4: update firmware to revision 1.20.8.0</changelog>
  <changelog author="tiwai@suse.de" date="1532001600">- Remove useless check_whence.py that leads to unnecessary python
  dependency (bsc#1101818);
  also removing the python3 hack at prep, too</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
</package>
<package pkgid="f9b79f7bd4ad19b8bfabe7eddb566e339ca33318300afd7ab6686f791aeefb94" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20190618" rel="lp151.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289,
  bsc#1128292):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303,bsc#1136498)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555329600">- Update to version 20190409:
  * linux-firmware: Add firmware file for Intel Bluetooth 22161
  * cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
  * linux-firmware: Update NXP Management Complex firmware to version 10.14.3
  * linux-firmware: add firmware for MT7615E
  * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
  * linux-firmware: update Marvell 8797/8997 firmware images
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
  * cxgb4: update firmware to revision 1.23.3.0
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1556884800">- Update to version 20190502:
  * amdgpu: update vega20 to the latest 19.10 firmware
  * amdgpu: update vega12 to the latest 19.10 firmware
  * amdgpu: update vega10 to the latest 19.10 firmware
  * amdgpu: update polaris11 to the latest 19.10 firmware
  * amdgpu: update polaris10 to the latest 19.10 firmware
  * amdgpu: update raven2 to the latest 19.10 firmware
  * amdgpu: update raven to the latest 19.10 firmware
  * amdgpu: update picasso to the latest 19.10 firmware
  * linux-firmware: update fw for qat devices
  * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
  * drm/i915/firmware: Add ICL HuC v8.4.3238
  * drm/i915/firmware: Add ICL GuC v32.0.3
  * drm/i915/firmware: Add GLK HuC v03.01.2893
  * drm/i915/firmware: Add GLK GuC v32.0.3
  * drm/i915/firmware: Add KBL GuC v32.0.3
  * drm/i915/firmware: Add SKL GuC v32.0.3
  * drm/i915/firmware: Add BXT GuC v32.0.3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1558699200">- Update to version 20190514:
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * amlogic: add video decoder firmwares
  * iwlwifi: update -46 firmwares for 22260 and 9000 series
  * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
  * iwlwifi: add -46.ucode firmwares for 9000 series</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560168000">- Update to version 20190607:
  * linux-firmware: update firmware for mhdp8546
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * imx: sdma: update firmware to v3.5/v4.5
  * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560945600">- Update to version 20190618:
  * cavium: Add firmware for CNN55XX crypto driver.
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
  * linux-firmware: update licence text for Marvell firmware</changelog>
</package>
<package pkgid="babfc1d3221fb59c6c0b4a1da50e663d57ddbc5146b8495175adc18a4022cb58" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20190618" rel="lp151.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289,
  bsc#1128292):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303,bsc#1136498)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555329600">- Update to version 20190409:
  * linux-firmware: Add firmware file for Intel Bluetooth 22161
  * cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
  * linux-firmware: Update NXP Management Complex firmware to version 10.14.3
  * linux-firmware: add firmware for MT7615E
  * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
  * linux-firmware: update Marvell 8797/8997 firmware images
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
  * cxgb4: update firmware to revision 1.23.3.0
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1556884800">- Update to version 20190502:
  * amdgpu: update vega20 to the latest 19.10 firmware
  * amdgpu: update vega12 to the latest 19.10 firmware
  * amdgpu: update vega10 to the latest 19.10 firmware
  * amdgpu: update polaris11 to the latest 19.10 firmware
  * amdgpu: update polaris10 to the latest 19.10 firmware
  * amdgpu: update raven2 to the latest 19.10 firmware
  * amdgpu: update raven to the latest 19.10 firmware
  * amdgpu: update picasso to the latest 19.10 firmware
  * linux-firmware: update fw for qat devices
  * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
  * drm/i915/firmware: Add ICL HuC v8.4.3238
  * drm/i915/firmware: Add ICL GuC v32.0.3
  * drm/i915/firmware: Add GLK HuC v03.01.2893
  * drm/i915/firmware: Add GLK GuC v32.0.3
  * drm/i915/firmware: Add KBL GuC v32.0.3
  * drm/i915/firmware: Add SKL GuC v32.0.3
  * drm/i915/firmware: Add BXT GuC v32.0.3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1558699200">- Update to version 20190514:
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * amlogic: add video decoder firmwares
  * iwlwifi: update -46 firmwares for 22260 and 9000 series
  * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
  * iwlwifi: add -46.ucode firmwares for 9000 series</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560168000">- Update to version 20190607:
  * linux-firmware: update firmware for mhdp8546
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * imx: sdma: update firmware to v3.5/v4.5
  * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560945600">- Update to version 20190618:
  * cavium: Add firmware for CNN55XX crypto driver.
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
  * linux-firmware: update licence text for Marvell firmware</changelog>
</package>
<package pkgid="142d3d91807fbd06669ed823f772f3f8527e3343e421c216fed974e104d063cd" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="7ef01c2591f3a3bfc9a9671abd8bfea013109098cc74a4aecf011d5f7bf253f5" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="44d7d8ea8b939efff295c82b91f30b383d6fcb8dc66953232cce6afb8cc2310b" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="22436fc817c12d3d541ecebfc79fe044df9ad26f5502377e7757e6c4d110c857" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="8f388ee6ac447dacb2d2ef0c6bf8b53d7986f6e5b8f741c22e72f0ab8bbae0cb" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="f121a415add0e3b03fd2ba7b3907134985a1b042323641cb1369d05b18525234" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="2f34ee904d739ad043f92928a1cb7e61791e6aa76b272791bbc82f9de4c1bc22" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="7a54202caca8ee77fc4ae0364a222327532bd668534cad7e5280fd61c0953d63" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="9eed1feed84e0831626910adc0ab4de27ab9d1f14c51cc16466163ad87fbe1ed" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="852da7a7175da7aad01d1159b9072e99b8f9f815cab0ffad7f7632cd3d2342be" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="e8026ca73c5760fedca8f5fbc93ed9f887ea1e631c8cbe3e82eea6152d6ba1c0" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="fafcbaf9fb2559ea8cbf21b0ff751924d3d5d99dd6910161699c8273a207152d" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="a6980224268acd8da7bf9a4aeb70a7014de4539d0e311de6b39cd279c19c3afe" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="0319e3f9bedfbb996b1a46470bd2931652b2abf0348ea686640e84bdfd0e7206" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="79632d11ca3f788a3bb53531c6710d4b29cdc9fce11d48b228de120b98f442a4" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="87682a89e0c7ee524809e8c470a3a9d6ccb01fda7fa77f5e5eaf3a0799803d20" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="f60c36332d29aab15b2f6e18029e43860ba37f95f25bdd76d3fae85c8496a167" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="85d5859368519d2f6639dc78fc977e25a4c12095da9da60d980f1f036b31e69b" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="cb2b8e52e561d76f78538eab926039f28e96ea4bb6ea96e7c99715e683d7e2e8" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="b9c80678f600c6a95af583a3a1d05f75d2a00c3e248b8038f8d650e9d4b47382" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="356892cee6c47cec65357c5829b2750abefc36423beaef3da68fe33ac318832d" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="07986861aae287fa07bd3265785fd91c19637b49c4b8c2530a1d78d7a86fb162" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="402636807d194e1df2768c71ffaf09186244530614954e283867fa5a053011c8" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8bcbf1e41a244d803f36f4e97fe1af79e17904872d9c70d7c4dca1875823c4dd" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d20d0bbce6a1421da81e6c26b454726ad77e5c6dbebd49b27fc157daaf8f443b" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="0365d316a134d44d8be0eadadcf6681b5230d49dda79ff84f36198321d90be9c" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="bad7df90e4b4b5cb1be9f08b8024fff298b1e3944e7e2916434b4fe8eba2edde" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="c00e6840dfd147e503c8c0ba1d789fab491271348bbb0580056a8c1d03e0f149" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="a8fc8370809917c56343aec16479d39df4ccd83a0d73aa3aec7ea070e355a17d" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="d7d7a7565b82c859ba78d06d5fe596da6e85c0a86734b8361c919a7c171ddd87" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="a63bb0331fd284cba57c64654274914e81ff31ed86d7c28bf489282ff2d7748a" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="6b5bd7a233b94833647a6b78097731cb9205c63d9ed75cd49405ac457116f482" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="a45506ad2e2fa853c9d7873e7160dcd8e58715245d473769af90a5cf068ca6e2" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="a24e11e34e9480c7c52f136795996de38086d3992e73870f6940dc7359d180a2" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="cb1b1e4b9bb5f95ce7fe392ed8dde0e2ccf04ae55b5937a713d8d07c50c0ae7c" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="b8c06445683a6f5b4de7f607690c3e09a8bedec0c0ab4a0acffec823ca14011c" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="f9d7f852a128257380597e846f032a41913e613fabf7202d8b85501a78ecf426" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="e802f25db0b84805d13b1b116680a5b19fdc7c8f80f203d708ba1150e9353394" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="67861bcb61d7523e9ae0caf67764fcdccb669bea91527de1d0bbf0140e74aadd" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5345984a3a1a80da14a546669e3f14eedc9dea9fee07a910f67de7b92e086d11" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="fbd3254927b37dc88990a1cab69214ba817c78f7df2a783ddf7437b083dc6c26" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="96adebe93915bd15dfb2fb5ab847e10e154d8c99a6329ff572f943b3727d9ded" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="76b4d3615c95c7a7d81967dff6dc7775774b4be8e3b851f039b49fa23b19485f" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="beac1551f9bb256b359a6898f7520e12d6047163b224116966e795c22d09d3ee" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="587088732b72c68e94967064c3f40a49aa0219b1207c6347a28931ed3a0392dd" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="8305ac588046c54e634b7a2cc3af540b09f7f2b77d185aaf7c2d2c2a412d3fc2" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="4238a65e7144653a6c050f922640395a961cb071ccc57d0e2733ba4061734602" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="76989099cc07bda25061b97d08a0b944b9689268de02e989b8bfa71c4afcaa82" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="e8bbdbbbe5672e418f105038025a233294b5e56d8777ebcf6fed9211db411a4e" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="80367ae45d6cca87aa8413b9d0ae0f1307a02b7555ab8a0d676d0ac9773439f4" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="9548c2c2ee6454296fe79ab89fe105e780e695f8f8bf34fe0d71646e32dfc310" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="3b8720b12e82f711dd9cb72274029ae8a2810d16408ec48bc0639d93b4147d2a" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="84d64e051041d4571ee623b6b735d429fe8affb42a09dfd655406352f1a747f5" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="0ed338a09128ff6bdb531d90b09ceb2b69b154d46290b0f22ab7671b24bfcb83" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="ec735f3904c0afa9c4e2fbda2017947c538df8607a00d164294f913eab1b5c5b" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="f24a6cd09a7e677637b1872ab178f4db6279728faed636b70a3ea6ace4792bab" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="465f7d4d31aefeab342a319fcff1414dd906e9aa1eae0f9fca84b2662ecbb318" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="898c3306477c95d19a06d1626d569c7cab02ad93b11baf81c42f212c74eabf30" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="b16120ea627ea936e56a1dc047c186848f223a394f81576bb7ea4e63e99340fb" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="eefc8e2a14d83db13e185fa147a7a4b1e82eb194450bbdbc163dc54a7782d6c2" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="0c6cf64a916819e33a621122c69be4759cccb94debceb9efad1a5fbeff520240" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="dbe0172318d666957f1215d0e88ed3f54fdf28feb49e2191bcb49cfdaad344b0" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="d78645d439928e87ce7e4c556fabc66f7badaef5980b0a653a7abae74d762716" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="f66681e83f1f35b2f2a5b4171215ff1772629c121639907a28a0fb1dcefd0112" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="46b2061e5f864c8ec834e60f9fd379a2afa060f8fd2c91176e9adaab09686060" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="2289f5d9a487e124c986b0d3f424ba41e5503d5b2d5e03d9c5505ea2ab54b0df" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="c6a8fe08f2e6febba69e89c9f2e741b8ff46382a63c6e404dc937299bea529c3" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="0d57e631949c2e0622b93b10de3e841b02872edbdd5d79171d6d7006e63ac090" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="3511ab8e29bd19a4a4f40449503a4eadf1686176ae6094d5e2496716afbc622c" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="c8dff944e1ef57415a991904444a8d4d62a75f224d514dad348c74798f16d732" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="28d0e500c94caf4e7a2ccaaabbfd741412535fab32712f42379e3748df7ae855" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="bdd38e4cd0845ef58a422aa9a2827729e4ccdb500a249612c8c0df144155bd45" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d98409ced0e36b8e585fdb43b0f74f2aa89861898afa6f0a2ddf0fd6dee04328" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="676170a3a1357d2fcec55b00143f1bbc76af76bd6d262d8fa5235f07bac8d39c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="05d895a98386a0bee60c5ce33a7b536361fe23461acff7d68f87a7d3dda4da78" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="98fab18c2652d08c562310c8e9fdf5b87062d7c4ce175596c3bcad388be4247a" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="1bd58447809539d1a5b4696f5a20c360c7909f659dfdbfd9bb03fa0fbb0e66eb" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="6e56151ad79c012534137ef9c1a71b1fd12cfc62ec178b5eaf4721bd49d04cdf" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="a20fc7394739c65e8f21aec2c60c102cf1589d6609e457d69e0b8dec9d10f04b" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="8660da288c47b055754f45d99e6128a4dc4d330cb4f18bb0a4b8a37359e2bc03" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="e524884cd3e7713411eaa561320951fccd6c3c21032eb70b8566dbc320c5373b" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="a830f1a4f36b0ebec3f856bc4f307e65ce865c677cdf2dbc752edbcca370e43d" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="4cd10e26c3d3e92977b60c72d3f3bd0326109b496519850d95cba5c0ec093afa" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="f7feb3c0b4508c5732e7c6ec971083b9cef101682b73041a006cfd888b3e56d8" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="6052aab385878f6408b4cf518dbccfc2f83e02b58aa74673f67238228cf7892a" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="24fd9e44ec8cde7191c86a5b76e0088c60dc8cd91a1126416f3bf0e5a6a2e0e9" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5bc2fef664838358f9e755094c27f5d606991d41321cc1979ddcdcd433e853b7" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="8d1023bf6634f9e1856c197101c8a706d65b4044c3561811336e245ee1f4d9db" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d9f16d6866e323462d831d12b0af3ecf1bdcab41d659090fb548ad9709386dc8" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="dda5011d7777ce8cc0d61e1f2298f752c47229de429b589cc25109564c04515a" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="2e35363f9f9fcafd963f76c7960d9eac2bcc31e4c01c7fb9dc3df44909ce21cd" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="641398ce913b2c21bae154e109208ab981ce13d2bd20f62669f2093180ab44d0" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="4bf9669fec33f2e5d439309346012392fd856d9c60d92b381961b641ac63dffa" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="a9981d8f4debea87a65124db9d36cccfb5309683fbd6223e7e0db2b68b4db960" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="02a7c7d9273bb6f15728979cc6aca01230a744e606b126ada916383645276aeb" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8b44107f68676614c350cbfaef10d3912198d149671a0ebdf666d5c785cda4f4" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="69ea4c7d7c962f9f39a764b9bab86f965221b2ed861a2e8f506cc7a1a3e52392" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="24d303532f417ffb71a98b951a4951d0c7e3cc77b25290ba0859ca27003e2d02" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="dcd3ecd8a2ad6473be24b2015c60786f30159ed22691364869e69f0c73f70d67" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="6ae40dced2026caa6025136ff7069badfa3e53f3772cea0b7caeea662b05a3de" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="b9e4b6d5cea54e2cc53c3c1b151131b41b0197ed78939497be662da8811b546b" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="854e4d55453f50c89700c9a3047e173b58d36ee3bb8e716a087ebe62cdb52d6c" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="bab095e0d59174edd7bcd60f5ec2e1c37ca282464c3ede074ac552dcd65e5fce" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="e386f0171b1101384a90264dd9088f17d8b74c26b1006c47500fe69327d53b1f" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="4788c00ed355d8ddc0bc975e8b4f62023cc0e8503da468214c7bd715a4972b74" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="d006b3122a4d1e1def42d4682b15e7caeb14a6d6bafcf49f0246e0d63c2e3a9d" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="da7b45b10345b1be6e52bdbd5f7d364929dd8ffc7acc9602c3b61ac8d1b5db0f" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="d347f7c0c13766464831c31075ef5e1b0d62ebc1f3aeba1076e37df19424bf28" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="702cc24ee0ff303d0ebf9e203bab01b9d641d26b44ad04a4403c4ebb49a93bdc" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="106ea007643fd4a3cb077accb3b4177ed553546ea2c233b1ef10f6e4cb566b61" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="c804ef2c38cf25292406f34540e6bbef401abb2100045946bab519290ba27bbf" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="2452800f6d01a74d0cc9efdb788268b6eca6ed021325244b58bd20b03834a21d" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="860d98e05df0c5c7f134c34f40a24302773ff9fdea02a84e0c3651ec67a01a0f" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="485644b95aeb65c3d28358e70cc25a73d422a308d4835c7ac45ec86dafd1e8ed" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="727eb81e3ff5c88ab7026c4082766ec8bbca4c0a8093a08e1c5566f122bf1de7" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="4a2a413f4afdf29093b964661a517465831b2c6de9f28c0083d388ff33e23342" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="ff7afba4969fc6329641139ede8d84669f86287ce0048dabffa10c74243434f4" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="9d90cbf873cb2bb245ef509f31fb732ccaf98b1b80a140e6d61c16787fbf8911" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="b8d0aebda32a0c2c0d5004f0f1e194fb97a1b884a83078ac2de02db6e85fc5dc" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="6404b58bcb82f3479b072a745a445ea08a7d815f004234e0bd2046d1e9bc9511" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="38de35985b5c1ab27ba8339ac31334d3a8953046f0e999a0dffbd41a0ca71cca" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="8d36744f58cb19d7a7901ec112da9c4c84aff2ea678c6f3ac1655e92483df403" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="c272fb6110c7270ef7f916c2409f7296268edbdf0a003a98be1ed1222c0d5027" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="8f9da144681be5f5bdb13ced366c88a13c7afb6ee13d99b712d49d3dc03d66b6" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="9edaed47122abd9fdbd9ff6f221a15bcecf8faca3ac100edc283ae901c508e65" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="24a80d78e5802d1cfa970f55afbc062575938a7d5968f105079df86661c4fdef" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="2b56f7d76dadc7a0aec82eb125498d817ed0aade4ec2ec8a0a756b19e751c91e" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d901413f0b6239613972eee14549b4ce1ee725ef9cd77a37bcbee63dcde12069" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="7f50d0532a8aa08b3de7b634278ddd6214a2d1428f1b6b100118ac568f747c25" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="f9be1d8adae5df231a911412ea45225d87f62a44cd25c80cf32ef92802410f0e" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="68e2bbbf9fcfd320418dd49b31860c96fcd853d7750f04a893fdf04865021da4" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="64831e4e858223ad96e6a89fc12a06964d0736671a070fda493ccb2e325b1b10" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="5fd22388da1a158303f6f67f788fa452b6b1b165139f7127a4a76341bb865876" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="6490b327b9e9b61932231f68d9298f98d1409fabf3760b6a53405a5ce6da7403" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="f7bda8d9d002f39e97b94c7d427541f6a3e5e00dff5c2860172424074a0a55f2" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="22f5f36ddfd8e6c97df7b2a0c6ea42426bfb3b2311095611ef42297c6530103b" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="143af2941cd58b5fc2fa799bad8c46af373f14d331c4a13c091e471e690a5201" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="0baa24e4a40391ce6cfab4ead0532de2f2c88558058d97239d035811be408772" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.13.1"/>
  <changelog author="lduncan@suse.com" date="1564660800">- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502
  jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling
  (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Remove set but not used variable 'oxid'
  (bsc#1136502 jsc#SLE-4703).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502
  jsc#SLE-4703).
- commit 77ba654</changelog>
  <changelog author="ptesarik@suse.cz" date="1564747200">- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117
  bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- commit 9f57b12</changelog>
  <changelog author="tiwai@suse.de" date="1564833600">- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
  (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power()
  (bsc#1051510).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
  (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
  (bsc#1051510).
- commit 43b7a1d</changelog>
  <changelog author="tiwai@suse.de" date="1564833601">- ALSA: hda: Fix 1-minute detection delay when i915 module is
  not available (bsc#1111666).
- commit 082cc32</changelog>
  <changelog author="lduncan@suse.com" date="1564920000">- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352
  jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352
  jsc#SLE-4687).
- commit b16ded6</changelog>
  <changelog author="jslaby@suse.cz" date="1565006400">- af_packet: Block execution of tasks waiting for transmit to
  complete in AF_PACKET (networking-stable-19_07_02).
- sctp: change to hold sk after auth shkey is created successfully
  (networking-stable-19_07_02).
- bonding: Always enable vlan tx offload
  (networking-stable-19_07_02).
- tipc: change to use register_pernet_device
  (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW
  timestamp (networking-stable-19_07_02).
- net: stmmac: fixed new system time seconds value calculation
  (networking-stable-19_07_02).
- tun: wake up waitqueues after IFF_UP is set
  (networking-stable-19_07_02).
- net: remove duplicate fetch in sock_getsockopt
  (networking-stable-19_07_02).
- commit f58bed8</changelog>
  <changelog author="ohering@suse.de" date="1565006401">- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier
  (bsc#1142701).
- commit a4b75ac</changelog>
  <changelog author="msuchanek@suse.de" date="1565006402">- powerpc/kdump: Handle crashkernel memory reservation failure
  (bsc#1143466 LTC#179600).
- commit 96d99bf</changelog>
  <changelog author="bp@suse.de" date="1565006403">- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bsc#1114279).
- commit 8668fda</changelog>
  <changelog author="dwagner@suse.de" date="1565006404">- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
  (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings
  (bsc#1143738).
- scsi: mpt3sas: Determine smp affinity on per HBA basis
  (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max
  (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode
  (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- commit 9a2f258</changelog>
  <changelog author="bp@suse.de" date="1565006405">- blacklist.conf: 12209993e98c x86/fpu: Don't export __kernel_fpu_{begin,end}()
  Breaks kABI.
- commit 9238c0c</changelog>
  <changelog author="lduncan@suse.com" date="1565006406">- scsi: libcxgbi: update route finding logic (bsc#1136352
  jsc#SLE-4687)
  Also had to update patches.kabi/scsi-cxgbi-kabi-fix-handle-completion-etc
- commit 5d2c37d</changelog>
  <changelog author="msuchanek@suse.de" date="1565006407">- Refresh sorted section.
- Refresh upstream tag patches.arch/mm-nvdimm-add-is_ioremap_addr-and-use-that-to-check-.patch.
- Refresh patches.drivers/scsi-ibmvfc-fix-WARN_ON-during-event-pool-release.patch.
- Refresh patches.fixes/drivers-base-introduce-kill_device.patch.
- Refresh patches.fixes/libnvdimm-bus-prevent-duplicate-device_unregister-calls.patch.
- commit ebf9b61</changelog>
  <changelog author="msuchanek@suse.de" date="1565006408">- Refresh sorted section.
- commit 7b2a8cd</changelog>
  <changelog author="msuchanek@suse.de" date="1565092800">- Refresh patches.fixes/fs-dax-deposit-pagetable-even-when-installing-zero-page.patch
- commit 2ec6206</changelog>
  <changelog author="msuchanek@suse.de" date="1565092801">- powerpc/pseries: Fix xive=off command line (FATE#322438,
  bsc#1085030, git-fixes).
- commit 62c9388</changelog>
  <changelog author="mbenes@suse.cz" date="1565092802">- tracing: Fix header include guards in trace event headers
  (bsc#1144474).
- commit 45fe8c0</changelog>
  <changelog author="msuchanek@suse.de" date="1565092803">- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch
  (FATE#322438, bsc#1085030, bsc#1144518, LTC#178833).
- commit c3b0fa1</changelog>
  <changelog author="ohering@suse.de" date="1565092804">- Add mainline tag to storvsc_ringbuffer_size patch
- commit e4862df</changelog>
  <changelog author="bpoirier@suse.com" date="1565179200">- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- commit 1050948</changelog>
</package>
<package pkgid="21a975eef5c1a1edfc1fe911370ba496ef7592253fc63a985d367dd4ed577252" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.16.1"/>
  <changelog author="oneukum@suse.com" date="1568289600">- Update
  patches.suse/USB-yurex-Fix-protection-fault-after-device-removal.patch
  (bsc#1146361 CVE-2019-15216).
- commit 9f9b329</changelog>
  <changelog author="sschricker@suse.de" date="1568289601">- blacklist.conf: blacklist usb-c tcpm patch
- commit cef523e</changelog>
  <changelog author="lduncan@suse.com" date="1568289602">- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path
  (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing
  link update AEN (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link
  down (bsc#1149976).
- scsi: qedf: Add debug information for unsolicited processing
  (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload
  (bsc#1149976).
- scsi: qedf: Print message during bailout conditions
  (bsc#1149976).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20
  (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing
  clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets
  and send fipvlan retries (bsc#1149976).
- commit edee027</changelog>
  <changelog author="lduncan@suse.com" date="1568289603">- Add some qedf commits to blacklist file (bsc#1149976)
- commit ad7f2e8</changelog>
  <changelog author="ptesarik@suse.cz" date="1568376000">- Refresh
  patches.suse/0001-iwlwifi-fw-use-helper-to-determine-whether-to-dump-p.patch.
- commit 09132ae</changelog>
  <changelog author="hare@suse.de" date="1568376001">- scsi: qla2xxx: Update driver version to 10.01.00.19-k
  (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver
  (bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler()
  function (bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes
  (bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts
  (bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI
  command context pointer (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the
  completion path (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed
  (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle()
  (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust
  (bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and
  completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
  (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done
  callback functions (bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id()
  (bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS
  pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs
  use little endian (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary
  image fails (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types
  for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy()
  and strncpy() (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size
  (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times
  out (bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument
  const (bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online()
  return value (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about
  out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer
  overflow (bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock()
  (bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails
  (bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out
  (bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox
  command fails (bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
  (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code
  (bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime
  (bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in
  qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Change the return type of
  qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument
  const (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration
  (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c
  (bsc#1143706).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from
  qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation
  (bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance
  (bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp
  reference count (bsc#1143706).
- commit adb520e</changelog>
  <changelog author="lma@suse.com" date="1568376002">- KVM: X86: Reduce the overhead when lapic_timer_advance is
  disabled (bsc#1149083).
- commit 004104f</changelog>
  <changelog author="msuchanek@suse.de" date="1568376003">- powerpc/pseries, ps3: panic flush kernel messages before
  halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: correctly track irq state in default idle
  (bsc#1150727 ltc#178925).
- commit 6cbd692</changelog>
  <changelog author="msuchanek@suse.de" date="1568376004">- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-Deliver-SEGV-signal-on-pkey-violation.patch.
- commit 41366ee</changelog>
  <changelog author="msuchanek@suse.de" date="1568376005">- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- Refresh patches.suse/powerpc-pseries-Flush-SLB-contents-on-SLB-MCE-errors.patch.
- Refresh patches.suse/powerpc-64s-consolidate-MCE-counter-increment.patch.
- commit a8b84bd</changelog>
  <changelog author="tiwai@suse.de" date="1568548800">- blacklist.conf: Add reverted drm/i915 entries
- commit 506d5fa</changelog>
  <changelog author="tiwai@suse.de" date="1568548801">- Revert "Bluetooth: validate BLE connection interval updates"
  (bsc#1051510).
- commit b690434</changelog>
  <changelog author="jthumshirn@suse.de" date="1568635200">- blacklist.conf: blacklist 73df167c819e s390/zcrypt: remove the exporting of ap_query_configuration
- commit 7e43372</changelog>
  <changelog author="jroedel@suse.de" date="1568635201">- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- commit be77ff3</changelog>
  <changelog author="ptesarik@suse.cz" date="1568635202">- Move
  patches.suse/KVM-X86-Reduce-the-overhead-when-lapic_timer_advance.patch
  into the sorted section.
- commit 52c3d4c</changelog>
  <changelog author="tiwai@suse.de" date="1568635203">- Update tags of upstreamed ibmvnic patches
- commit 8a435ac</changelog>
  <changelog author="fdmanana@suse.com" date="1568635204">- Btrfs: fix assertion failure during fsync and use of stale
  transaction (bsc#1150562).
- commit 25aef77</changelog>
  <changelog author="fdmanana@suse.com" date="1568635205">- Btrfs: do not abort transaction at btrfs_update_root() after
  failure to COW path (bsc#1150933).
- commit 7ea9d0d</changelog>
  <changelog author="tzimmermann@suse.de" date="1568721600">- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- commit 700d2e9</changelog>
  <changelog author="tiwai@suse.de" date="1568721601">- vhost: make sure log_num &lt; in_num (bsc#1150112,CVE-2019-14835).
- commit b68beb0</changelog>
</package>
<package pkgid="cdd5cc73b71bd626c4d4adce618234f1534159b6192ba83844072fd2a095832c" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.20.1"/>
  <changelog author="msuchanek@suse.de" date="1570017600">- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
  (bsc#1152161 ltc#181664).
- commit 2a753e0</changelog>
  <changelog author="msuchanek@suse.de" date="1570017601">- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on
  POWER9 (bsc#1152161 ltc#181664).
- commit 1b17584</changelog>
  <changelog author="msuchanek@suse.de" date="1570017602">- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get,
  set} (bsc#1152243 ltc#181472).
- commit 21f8e3a</changelog>
  <changelog author="msuchanek@suse.de" date="1570017603">- net/ibmvnic: prevent more than one thread from running in reset
  (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can
  run (bsc#1152457 ltc#174432).
- commit f425435</changelog>
  <changelog author="msuchanek@suse.de" date="1570017604">- blacklist.conf: Add duplicate commit id.
- commit 0b5d9ab</changelog>
  <changelog author="msuchanek@suse.de" date="1570017605">- powerpc/xive: Fix bogus error code returned by OPAL
  (bsc#1065729).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt
  handling to C (bsc#1065729).
- commit 8fcebeb</changelog>
  <changelog author="msuchanek@suse.de" date="1570017606">- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS
  (bsc#1065729).
- commit 9467589</changelog>
  <changelog author="msuchanek@suse.de" date="1570104000">- powerpc/pseries: Call H_BLOCK_REMOVE when supported
  (bsc#1109158).
- powerpc/pseries: Read TLB Block Invalidate Characteristics
  (bsc#1109158).
- commit ed9227d</changelog>
  <changelog author="msuchanek@suse.de" date="1570104001">- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  (bsc#1061840).
- commit 096c2a9</changelog>
  <changelog author="msuchanek@suse.de" date="1570104002">- blacklist.conf: Add fixes for unsupported ppc features.
  813af51f5d30 powerpc/boot: Set target when cross-compiling for clang
  aea447141c7e powerpc: Disable -Wbuiltin-requires-header when setjmp is
  a521c44c3ded powerpc/book3e: drop mmu_get_tsize()
- commit 1c86730</changelog>
  <changelog author="msuchanek@suse.de" date="1570104003">- powerpc/pseries/memory-hotplug: Fix return value type of
  find_aa_index (bsc#1065729).
- commit fea5480</changelog>
  <changelog author="pmladek@suse.com" date="1570104004">- blacklist.conf: There are too many locks involved and the race is rather
  theoretical. Better to do not play with matches (bsc#1152325)
- Delete
  patches.suse/ftrace-x86-remove-possible-deadlock-between-register_kprobe-and-ftrace_run_update_code.patch.
- Delete
  patches.suse/module-fix-livepatch-ftrace-module-text-permissions-race.patch.
- commit 3ca917a</changelog>
  <changelog author="msuchanek@suse.de" date="1570104005">- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
  (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling
  (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range()
  (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about
  TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram
  (bsc#1065729).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory
  (bsc#1065729).
- commit d2ea316</changelog>
  <changelog author="wqu@suse.com" date="1570190400">- btrfs: relocation: fix use-after-free on dead relocation  roots
  (bsc#1152972).
- commit 24ae263</changelog>
  <changelog author="wqu@suse.com" date="1570190401">- btrfs: qgroup: Fix the wrong target io_tree when freeing
  reserved data space (bsc#1152974).
- commit c3a2587</changelog>
  <changelog author="wqu@suse.com" date="1570190402">- btrfs: qgroup: Fix reserved data space leak if we have  multiple
  reserve calls (bsc#1152975).
- commit dd30f55</changelog>
  <changelog author="jgross@suse.com" date="1570449600">- xen-netfront: do not use ~0U as error return value for
  xennet_fill_frags() (bsc#1065600).
- commit f1c5e2e</changelog>
  <changelog author="pvorel@suse.cz" date="1570449601">- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- commit dc03fff</changelog>
  <changelog author="jgross@suse.com" date="1570449602">- xen/xenbus: fix self-deadlock after killing user process
  (bsc#1065600).
- commit 76e2ca6</changelog>
  <changelog author="jthumshirn@suse.de" date="1570449603">- KABI protect struct vmem_altmap (bsc#1150305).
- libnvdimm/altmap: Track namespace boundaries in altmap
  (bsc#1150305).
- commit 8f5698c</changelog>
</package>
<package pkgid="5fbeb3a424795208f8cb8332f690d25028205c8f20feded1e27cd040f7cec966" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.25.1"/>
  <changelog author="tiwai@suse.de" date="1572004800">- net/rds: remove user triggered WARN_ON in rds_sendmsg
  (bsc#1154848).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- commit bd4294a</changelog>
  <changelog author="tiwai@suse.de" date="1572004801">- rds: Fix warning (bsc#1154848).
- commit d13b584</changelog>
  <changelog author="wqu@suse.com" date="1572264000">- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bsc#1155178).
- commit ed81a2e</changelog>
  <changelog author="wqu@suse.com" date="1572264001">- btrfs: qgroup: Always free PREALLOC META reserve in
  btrfs_delalloc_release_extents() (bsc#1155179).
- commit b745754</changelog>
  <changelog author="wqu@suse.com" date="1572264002">- btrfs: tracepoints: Fix wrong parameter order for qgroup  events
  (bsc#1155184).
- commit 478f3fd</changelog>
  <changelog author="wqu@suse.com" date="1572264003">- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bsc#1155186).
- commit d54f577</changelog>
  <changelog author="tiwai@suse.de" date="1572264004">- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;=
  NUM_WEPKEYS (bsc#1051510).
- USB: ldusb: fix read info leaks (bsc#1051510).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- USB: legousbtower: fix a signedness bug in tower_probe()
  (bsc#1051510).
- USB: legousbtower: fix memleak on disconnect (bsc#1051510).
- USB: ldusb: fix memleak on disconnect (bsc#1051510).
- commit f5f355a</changelog>
  <changelog author="tiwai@suse.de" date="1572264005">- crypto: af_alg - Initialize sg_num_bytes in error code path
  (bsc#1051510).
- commit c60dfb0</changelog>
  <changelog author="tiwai@suse.de" date="1572264006">- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- commit 344d8c6</changelog>
  <changelog author="tiwai@suse.de" date="1572264007">- Revert "drm/radeon: Fix EEH during kexec" (bsc#1051510).
- commit 412da23</changelog>
  <changelog author="tiwai@suse.de" date="1572264008">- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efi/memattr: Don't bail on zero VA if it equals the region's PA
  (bsc#1051510).
- commit 526172a</changelog>
  <changelog author="tiwai@suse.de" date="1572264009">- efivar/ssdt: Don't iterate over EFI vars if no SSDT override
  was specified (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- commit 39c519c</changelog>
  <changelog author="dwagner@suse.de" date="1572264010">- scsi: qla2xxx: fix a potential NULL pointer dereference
  (bsc#1150457 CVE-2019-16233).
- commit 69a4d13</changelog>
  <changelog author="fdmanana@suse.com" date="1572264011">- Refresh
  patches.suse/Btrfs-check-for-the-full-sync-flag-while-holding-the.patch.
- commit 4eac8d4</changelog>
  <changelog author="tiwai@suse.de" date="1572264012">- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
  (bsc#1051510).
- HID: fix error message in hid_open_report() (bsc#1051510).
- commit afa51a9</changelog>
  <changelog author="jslaby@suse.cz" date="1572350400">- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- commit 88714eb</changelog>
  <changelog author="mkoutny@suse.com" date="1572350401">- blacklist.conf: "panic: ensure preemption is disabled during panic()"
- commit 1636cad</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1572350402">- Update
  patches.suse/net-hsr-fix-memory-leak-in-hsr_dev_finalize.patch
  (networking-stable-19_03_15 bsc#1152685 CVE-2019-16995).
  Added bsc and CVE number.
- commit 3ebed7a</changelog>
  <changelog author="tiwai@suse.de" date="1572436800">- Refresh patches.suse/ASoC-es8328-Fix-copy-paste-error-in-es8328_right_lin.patch
  Add a cherry-picked commit to ignore, too
- commit 7e4bed3</changelog>
  <changelog author="tiwai@suse.de" date="1572436801">- USB: usblp: fix use-after-free on disconnect (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bsc#1051510).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bsc#1051510).
- USB: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- nl80211: fix null pointer dereference (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- commit dd90a96</changelog>
</package>
<package pkgid="b5ead7cfa6947df8d4c0bda99bd3edbb173b5177f28fefbaa3b55bf026f16ebd" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.32.1"/>
  <changelog author="tiwai@suse.de" date="1573214400">- fjes: Handle workqueue allocation failure
  (CVE-2019-16231,bsc#1150466).
- commit f6922b5</changelog>
  <changelog author="tiwai@suse.de" date="1573214401">- drm/amdgpu/powerplay/vega10: allow undervolting in p7
  (bsc#1111666).
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/msm/dpu: handle failures while initializing displays
  (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
  (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no
  output (bsc#1111666).
- commit e045aeb</changelog>
  <changelog author="tiwai@suse.de" date="1573214402">- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW
  version 36 (bsc#1111666).
- commit 8eb95be</changelog>
  <changelog author="tiwai@suse.de" date="1573214403">- phylink: fix kernel-doc warnings (bsc#1111666).
- commit 5e0560d</changelog>
  <changelog author="tiwai@suse.de" date="1573214404">- staging: rtl8188eu: fix null dereference when kzalloc fails
  (bsc#1051510).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- power: supply: max14656: fix potential use-after-free
  (bsc#1051510).
- sc16is7xx: Fix for "Unexpected interrupt: 8" (bsc#1051510).
- commit 08a343a</changelog>
  <changelog author="tiwai@suse.de" date="1573214405">- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: gadget: Reject endpoints with 0 maxpacket value
  (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
  virt_boundary_mask to avoid SG overflows") (bsc#1051510).
- usb: handle warm-reset port requests on hub resume
  (bsc#1051510).
- commit bfddb23</changelog>
  <changelog author="tiwai@suse.de" date="1573214406">- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- commit 5cf8077</changelog>
  <changelog author="tiwai@suse.de" date="1573214407">- ALSA: timer: Fix incorrectly assigned timer instance
  (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock
  for Focusrite Saffire Pro i/o series (git-fixes).
- commit 9d7979a</changelog>
  <changelog author="tiwai@suse.de" date="1573214408">- Move upstreamed CA0132 fix into sorted section
- commit 4fc57c9</changelog>
  <changelog author="dwagner@suse.de" date="1573473600">- Refresh series.conf
  Some of the qla2xxx patches have been promoted to Linus' tree.
- commit 4e8846f</changelog>
  <changelog author="hare@suse.de" date="1573473601">- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- commit 3e02bd2</changelog>
  <changelog author="mbenes@suse.cz" date="1573473602">- tracing: Get trace_array reference for available_tracers files
  (bsc#1156429).
- commit ada9a25</changelog>
  <changelog author="mbenes@suse.cz" date="1573473603">- blacklist.conf: 98dc19c11470 ("tracing/hwlat: Report total time spent in all NMIs during the sample")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 94cfcea</changelog>
  <changelog author="mbenes@suse.cz" date="1573473604">- blacklist.conf: fc64e4ad80d4 ("tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 79404f5</changelog>
  <changelog author="dwagner@suse.de" date="1573473605">- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Remove an include directive (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635
  bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix SRB leak on switch command timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do command completion on abort timeout
  (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706
  bsc#1082635 bsc#1154526 bsc#1048942).
- commit 98e1d47</changelog>
  <changelog author="oneukum@suse.com" date="1573473606">- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (git-fixes).
- commit e1ba31a</changelog>
  <changelog author="oneukum@suse.com" date="1573473607">- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- commit 43ad415</changelog>
  <changelog author="ohering@suse.de" date="1573560000">- scsi: storvsc: Add ability to change scsi queue depth
  (bsc#1155021).
- commit 978166d</changelog>
  <changelog author="pvorel@suse.cz" date="1573560001">- Refresh
  patches.suse/alarmtimer-Use-EOPNOTSUPP-instead-of-ENOTSUPP.patch.
- commit 82de0f6</changelog>
  <changelog author="tiwai@suse.de" date="1573560002">- drm/i915/cmdparser: Fix jump whitelist clearing
  (CVE-2019-0154,bsc#1135966,CVE-2019-0155,bsc#1135967).
- commit bd2c4f7</changelog>
</package>
<package pkgid="52658e3450bee4310629f27d851b36ea4c44e9d74b673e5f78b3b3228e9fd85b" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="229d6b1e5559047b8deee6705d66c9e990f39684e7677005c745cac308319718" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="82e40030a8cd1a2791def8858456444db45c3000e3b9710575e2da8303ca2645" name="kidentitymanagement" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="4b5ba67b3bd9be6b4e180e7f43084bbf2f362e69af7708205fce0949d47521df" name="kidentitymanagement-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="fe445a617b90c36b0ab91d07a131692e24c77fe82e112153c0198772031b0d5e" name="kidentitymanagement-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="de2a9ff97aa89065ebc4c201d0005d839044ad6bff1e3fc0c6cedc349fd5c1b2" name="kio-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="f6fb7416f0cd4e0e272be17de0f884a4991eccc0602d43ecedee0c873ecf1999" name="kio" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="0e9d89f4ce445171aa5ba7d1136dc410b42d09257abf259c9625aedc1633f3b8" name="kio" arch="src">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="36d67bc5f0ebf1b0ef07b33a0589bf563126e2ca25f288c82bfeb447ecb7f133" name="kio" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="1dda5b6c6aa7fb4ba8c03c0e6d7f7ebe727b4d4ad3541cbe67ac3900b303919d" name="kio-core-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="f4b2decc46b6c08e86515a4f9879fc9d84d7ccde04492f5d0a11999da0240137" name="kio-core" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="fd2b9775bcaf1fa6baae9a9682786a277df97a3ea7e94e14accc727f24b5fc87" name="kio-core" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="cc09d022c95396dea1fda5c5c7b56931230f6b07940aad725816ebc76b91f3a0" name="kio-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="30dda8664f75cba5806cb699e9e6b4aa7f89f95c6f9a57490023ea1fbe9b1196" name="kio-devel" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="075b882370ef582f5717d4abe385c25aa9e55d6070e9c3efcc7d937fa169f61a" name="kio-devel" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="36a5a238e73649e262bfbafc0f70df48409d649410e301c2f37bac744fc60c43" name="kio-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="6c644313789b845cfb6c2001d700689ed9d86e34bc4c41ae17715b6ac2801dfc" name="kiwi-man-pages" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="4563ff94f17482bb3cc44f8885c614c3b12e8fe5343d2f3f66429c8bb33361e4" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="588f798c65db3139a327425975d3afaa9530accafe26e280a4a8bc18d70738a5" name="kiwi-man-pages" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="43f28de6ca1ba01bf6379ced04cf0eb7026cd9dce0e36fa37acf38c0033e959c" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="61329883f92e32a055806a067e3a8c562c93e9256e40702aca4a67c6fefe35fd" name="kiwi-pxeboot" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="2ebe149fe1b50128f5f0590fd1e2aca1bfc8c1e8a506b7118e06df6f9aecad60" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="e47780086ec2ab525e8e119e5d5338d4982881e8c042189ca20abccd19243b85" name="kiwi-pxeboot" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="5bd91f04da1719a491c83ff466a5e0c0fa8f4fa20d1f6ea459d985a78a554f6e" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="d1d48a22d31310e8e197bd9a3eebc54141dbee07981d07f1f485c6f6e93e53a2" name="kiwi-tools" arch="i586">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="29d4ac9f3dbacdcccf46af7a48afc953eb969e1bf40d02ccac22185237b60d69" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp151.2.3.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="d2293f244e60a10b47b2dbf52b036853204b622d4d8cff12a49fa8bc905a97cb" name="kiwi-tools" arch="i586">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="d38ad5429b041eaba5053ee98d4a039acb059b7c992a7e916227728c9b5435b5" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.18.16" rel="lp151.2.6.1"/>
  <changelog author="dcassany@suse.de" date="1545134400">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="ms@suse.de" date="1562760000">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006407">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
</package>
<package pkgid="654d871dec71c43e43a5a860419b897dcfd7546b9debecfc22b00b521ad71f88" name="kmail" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="3dc660e9c575667d80a20d6c2dacb90f9257e1ab86f27e461715bde1855a848b" name="kmail" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="2a6e52415127e4411e1110ac4fd8cdca5262a4717a89b27bd1ed8a092734b5fc" name="kmail" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="50fa194d35fd180e755a4f495a8c3119fc83dbb229523c1565a5c5ed331c22e1" name="kmail" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="94a4eda63181925447b9851d1491a8e0f587a4c2e82857eec0dbfea623f2a832" name="kmail-application-icons" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="fa846a2f1848f2e2313afb1a6ca1d7126cb112321e9251c536519dbec0d26793" name="kmail-application-icons" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="3f18d4e6cd51a682f70af683301c4f7b8344422703aedbf81fc076df6bdb1440" name="kmail-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="1c843a3ea4b1916523f07ab1733ddae10e6ab566b536a0047a99cc21ce6e61ee" name="kmail-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="98f57c022b363c17f2b61af74800d00cdc11e18de0f0cca89c1dc7a9529b9f66" name="kmozillahelper" arch="src">
  <version epoch="0" ver="5.0.5" rel="lp151.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
</package>
<package pkgid="6d479190b6c0182ebec2f3dd5eae42388bd7a249a143432e8b240c44c14163e2" name="kmozillahelper" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
</package>
<package pkgid="95d29326a29966962e2aa75cfc73d0e4d570eb7813f408ad569fe20382af687d" name="kmymoney" arch="src">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="c6242e0207e603e3f182908f94da586dc2676e778a866bad31869ba00adcbe99" name="kmymoney" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="3ff0f764fe020ffc278b519ce9c363968e62ce7ac10e374abf364885a0fe0f07" name="kmymoney-devel" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="150173a9f44ae35578a62dee98c72f80a53a9472144937b6af300a38dbe0e773" name="kmymoney-lang" arch="noarch">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="05b5c70c4fcb2fefe6f25986556892bcc71d131ecea1ef8bff239f117692fd96" name="kompare" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Fix build with Qt 5.11 (missing QButtonGroup)
  * Added service menu (kde#388559)
  * Remove obsolete reviewboardrc file
  * Use QFile::exists() consistently and directly</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Require cmake 3.0, as expected by recent ECM</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1566388800">- Add upstream patch to fix the "Compare" button not getting
  enabled in the initial dialog when selecting files via the file
  browser (boo#1146394, kde#390024):
  * Fix-browse-for-files_folders-doesnt-enable-Compare-button.patch</changelog>
</package>
<package pkgid="fe989d1b2c8dc7a4533e164d4046eebb3f2326c22b6b89d1beaa9e36a55b76e8" name="kompare" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Fix build with Qt 5.11 (missing QButtonGroup)
  * Added service menu (kde#388559)
  * Remove obsolete reviewboardrc file
  * Use QFile::exists() consistently and directly</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Require cmake 3.0, as expected by recent ECM</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1566388800">- Add upstream patch to fix the "Compare" button not getting
  enabled in the initial dialog when selecting files via the file
  browser (boo#1146394, kde#390024):
  * Fix-browse-for-files_folders-doesnt-enable-Compare-button.patch</changelog>
</package>
<package pkgid="f7ba2220f79934accb6af0a0e0c7d68dd673c0752f4e751a16618e9f77e1ffa6" name="kompare-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Fix build with Qt 5.11 (missing QButtonGroup)
  * Added service menu (kde#388559)
  * Remove obsolete reviewboardrc file
  * Use QFile::exists() consistently and directly</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Require cmake 3.0, as expected by recent ECM</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1566388800">- Add upstream patch to fix the "Compare" button not getting
  enabled in the initial dialog when selecting files via the file
  browser (boo#1146394, kde#390024):
  * Fix-browse-for-files_folders-doesnt-enable-Compare-button.patch</changelog>
</package>
<package pkgid="44a425b198b303b946f2645bd72aa7f9b768e8015e06a5eefa1da28c711e54b6" name="kompare-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Fix build with Qt 5.11 (missing QButtonGroup)
  * Added service menu (kde#388559)
  * Remove obsolete reviewboardrc file
  * Use QFile::exists() consistently and directly</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Add donation url to appdata</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Require cmake 3.0, as expected by recent ECM</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1566388800">- Add upstream patch to fix the "Compare" button not getting
  enabled in the initial dialog when selecting files via the file
  browser (boo#1146394, kde#390024):
  * Fix-browse-for-files_folders-doesnt-enable-Compare-button.patch</changelog>
</package>
<package pkgid="26adf3dd3b07f269a73220f04a5a0a7a12d3db9a90bcde34f7784ae83588e59d" name="kpartx" arch="i586">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="de528b05f3960430fd2691f092d035cab7ddee9ff74475497c98a779eb3bb459" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="66ffd6917cddffe689045374e7850f49f28b17af3bddf106c78fe84714a28366" name="kpartx" arch="i586">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="1aa21214e0d5676a93fc62211e76eb70431ccae2e2641235ce8be7056852ce3b" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="82928833c35fd2dc10409de5144bb0887a24e539859f725e21bd45145f64ec4c" name="kpat" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Summary: SpiderSolitaire: Check if there exists a card below before accessing it (kde#389540)</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Make keyboard action labels translatable
  * Apply Jonathan's suggested change, let's see if it still builds on BSD
  * Fix linking on FreeBSD
  * Use Freecell Solver for FreeCell and Simple Simon
  * Refactor the Solver class
  * Getting rid of macros and dead code:
  * General Code clean-up</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Freecell: Don't allow moving out of foundation</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * FreeCell: Restore cards autoplaying to foundation (kde#397770)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Reduce wasted space for Klondike and Grandfather (kde#307625, kde#378914)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Make sure the card we're trying to automove is the top of the pile</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix crash while closing with save state enabled
  * Add appdata file
  * Fix the libfreecell-solver headers if using $PKG_CONFIG_PATH
  * Port to auto-generated categorized logging
  * Fix the licence header of shuffle_test.cpp.
  * Move under autotests per the KDE convention.
  * Fix the indentation.
  * Extract a common constant.
  * Rename the test class.
  * add a test
  * Extract typedefs.
  * add shuffle tests.
  * start adding the test.
  * Extract shuffle.h for easier testing.
  * Convert to a template to facilitate testing.
  * Add Shlomi Fish to the credits
  * Use unsigned variable in random dealer to avoid undefined behaviour
  * USe qEnvironmentVariableIsEmpty
  * Needs include of &lt;QBuffer&gt; for Qt 5.11</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak found by asan</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Correct help link for the new versions of KF5 (&gt;52) (kde#402837)</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Fix-fc-solve-misbehaving-preset.patch to avoid freezes and/or
  high CPU/RAM usage in the Freecell solver (kde#405187)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1567857600">- Add FcSolveSolver-cleanup-ressources.patch to fix crashes due to
  resource exhaustion (boo#1146622, kde#395624)</changelog>
</package>
<package pkgid="7c8630c2015f231aa27367b7c5f690819252467d0981c6fd762e6265f80d3b01" name="kpat" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Summary: SpiderSolitaire: Check if there exists a card below before accessing it (kde#389540)</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Make keyboard action labels translatable
  * Apply Jonathan's suggested change, let's see if it still builds on BSD
  * Fix linking on FreeBSD
  * Use Freecell Solver for FreeCell and Simple Simon
  * Refactor the Solver class
  * Getting rid of macros and dead code:
  * General Code clean-up</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Freecell: Don't allow moving out of foundation</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * FreeCell: Restore cards autoplaying to foundation (kde#397770)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Reduce wasted space for Klondike and Grandfather (kde#307625, kde#378914)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Make sure the card we're trying to automove is the top of the pile</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix crash while closing with save state enabled
  * Add appdata file
  * Fix the libfreecell-solver headers if using $PKG_CONFIG_PATH
  * Port to auto-generated categorized logging
  * Fix the licence header of shuffle_test.cpp.
  * Move under autotests per the KDE convention.
  * Fix the indentation.
  * Extract a common constant.
  * Rename the test class.
  * add a test
  * Extract typedefs.
  * add shuffle tests.
  * start adding the test.
  * Extract shuffle.h for easier testing.
  * Convert to a template to facilitate testing.
  * Add Shlomi Fish to the credits
  * Use unsigned variable in random dealer to avoid undefined behaviour
  * USe qEnvironmentVariableIsEmpty
  * Needs include of &lt;QBuffer&gt; for Qt 5.11</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak found by asan</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Correct help link for the new versions of KF5 (&gt;52) (kde#402837)</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Fix-fc-solve-misbehaving-preset.patch to avoid freezes and/or
  high CPU/RAM usage in the Freecell solver (kde#405187)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1567857600">- Add FcSolveSolver-cleanup-ressources.patch to fix crashes due to
  resource exhaustion (boo#1146622, kde#395624)</changelog>
</package>
<package pkgid="27b23ae7307de06dbfb0cc58e5750dc0264b3ccb6ac20d5585d6c469d8b9a3c1" name="kpat-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Summary: SpiderSolitaire: Check if there exists a card below before accessing it (kde#389540)</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Make keyboard action labels translatable
  * Apply Jonathan's suggested change, let's see if it still builds on BSD
  * Fix linking on FreeBSD
  * Use Freecell Solver for FreeCell and Simple Simon
  * Refactor the Solver class
  * Getting rid of macros and dead code:
  * General Code clean-up</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Freecell: Don't allow moving out of foundation</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * FreeCell: Restore cards autoplaying to foundation (kde#397770)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Reduce wasted space for Klondike and Grandfather (kde#307625, kde#378914)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Make sure the card we're trying to automove is the top of the pile</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix crash while closing with save state enabled
  * Add appdata file
  * Fix the libfreecell-solver headers if using $PKG_CONFIG_PATH
  * Port to auto-generated categorized logging
  * Fix the licence header of shuffle_test.cpp.
  * Move under autotests per the KDE convention.
  * Fix the indentation.
  * Extract a common constant.
  * Rename the test class.
  * add a test
  * Extract typedefs.
  * add shuffle tests.
  * start adding the test.
  * Extract shuffle.h for easier testing.
  * Convert to a template to facilitate testing.
  * Add Shlomi Fish to the credits
  * Use unsigned variable in random dealer to avoid undefined behaviour
  * USe qEnvironmentVariableIsEmpty
  * Needs include of &lt;QBuffer&gt; for Qt 5.11</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak found by asan</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Correct help link for the new versions of KF5 (&gt;52) (kde#402837)</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Fix-fc-solve-misbehaving-preset.patch to avoid freezes and/or
  high CPU/RAM usage in the Freecell solver (kde#405187)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1567857600">- Add FcSolveSolver-cleanup-ressources.patch to fix crashes due to
  resource exhaustion (boo#1146622, kde#395624)</changelog>
</package>
<package pkgid="a00374a7696b1cd59d0947808dac51686ea903bd05fd708fa98e5bb46a67b73d" name="krb5" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="fdd9ad899b3c18b573f0cdfc615358c2f95c1aeb707f836af8093a0a86dfa69d" name="krb5" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2a0a7e80281f133b81abd41a6dd0e2fdf0c79c804d1e983949efcb4547172999" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="d8e23e283d3f4d711fbf9085d3b8a1543a931e4aa662effa85abaad909b5bf60" name="krb5" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="57af991177d9566ec2be42d0e908ce399382303276061ccabba2bbbee3226ae6" name="krb5" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="f4bf140576c12290f20abb39ffdfab64fbc787e48643e8c186f7379da9f12c67" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="ef10b7a9e31e8a70f1d8301d4762048494dd8bc8d934e24a3ba17e816d8051fa" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2b6e2f34471e90bcc190a270acfd5c4f9c2dfe41099a8da9c17b7760e62c685d" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="405a7dafbf45045aa67f208757c56162efc7cd817b37737515a32d5f0cf4d04b" name="krb5-client" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="be11a93b6f17e581f8a506d6acae5c3a01e1b0ff12dbb5e0f8dd5148771bd81a" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="abe97cdd4fd95b8241f666c6d957a571ef62d4a0f673c2694945d36890d8556f" name="krb5-client" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="e16a1dd48a8c468b46aa640d35d419a0cf5dee49ee0f6832be1f05f1d5605299" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="2ddb958e443b522e331b5e460611a4b1fad41609b0e92d25e9c9c6d327946d90" name="krb5-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="6c54a3a3c28427df194dd802eee0794e77f6f626b1bc6913a0a9236c4b7af4ef" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="3b81b4388b9762b123f439a7662ea831aa55365c9ee4c57a26660f6a26e782cf" name="krb5-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="46791c1c99db18cdd9f1afa47da038739bbc720db00b91413c76a14c128598ee" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="aaab93767cbae3cca70409ecb1b96c66cf0d312ade266a2ad81bbada87bc1eab" name="krb5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="b25ebd56a40a437662ae5793ef599a39668fde9fc58f069353730c11f149e8a4" name="krb5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="4399ecb9c1a32bd1b1ed674be34d292eff7270396ada991d64b14354d0e40c94" name="krb5-mini" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="ad7b2de257690316307bb94f2e16f113c467578ad94ac051ebd56f18eba857d0" name="krb5-mini" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="63fea03a53a3c6a55014af7dbf90fc59fe200ead7a46395395334f1895a6bfa6" name="krb5-mini" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="9f405db650a8f3a8fad771f3f0872faf41fdb6d16b5cf7d6ea0b544c7c892804" name="krb5-mini" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="11d95645c2ecacd195145ec5a3bed2b95ccb9b804acf4b47c67e196cdddf9ec3" name="krb5-mini" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="5a01caa12138074393544917735c47a52938c99fe824c7758eeb6215368eb9ac" name="krb5-mini" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="86a2bbdf7886d77cc113cb7c68e2492c60870b777101bee011e67a152addeb55" name="krb5-mini-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="780e0452f0d7b563b479e84d442732bfda3b5062e6af22b5d8b820e6e8cfd1af" name="krb5-mini-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="e68de1c7cc46f300efe9c4dd348b1b9f8e33cb97355f19f571e791605614735c" name="krb5-mini-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="454116c5213bb313fba382bb1de5d997fb6ce0642a293f9c8376e6ea979a172a" name="krb5-mini-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="030d22a780404524b71bd5d0b82ba76aeb541b4f16ec428a0621d7839374d92e" name="krb5-plugin-kdb-ldap" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2ff388fd93d18084d8659ddfbe9b1ab68810b7e45db0a21f55f31e8d0ca9949a" name="krb5-plugin-kdb-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="aa8b38af2b3456ac16ef05754ad62111a1dc5c39f3f6b977e4add9c76f8b076c" name="krb5-plugin-kdb-ldap" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="7345488d645c730a623570d183b7b3eba737ed07e877263a64af9fe34dc642e8" name="krb5-plugin-kdb-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="7bb6b4a8dbfd748008a18e91f1f184fd83a5a8c1c99412e1a3297262d08132df" name="krb5-plugin-preauth-otp" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="e981e82d8068e81dbdbb957fc4862fe1ac963319cf29624017a0bc143273c354" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="93ec080481cdbafa6fa5f9474e7fa33757912f8289cef88a69075e96e6ace3b6" name="krb5-plugin-preauth-otp" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="7d8252f5b9f5c9438d3ca5e8853df4bc2d85fac65da497be0e51690895ec22f4" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="cf0bbe94113198493cb0f4a60b0cf4fa0b294cf2d8a091d4c206a6aff959be84" name="krb5-plugin-preauth-pkinit" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="5d47d870787662a5df59d4e41c2f4fd152ad020ea5c0d8bc0d87d24e0c943d28" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="6792f5dc0a022f739457210fa3c3fb5a760ae78c438768c6df82228cfa74aa1c" name="krb5-plugin-preauth-pkinit" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="35d68533c008692fa1f4d54d72917d01a83d79e84152ac506012c4b8a015001e" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="a05ece3c3461259d25ef098c3e754ab205fcf825bd65e442a618515a7be44174" name="krb5-server" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="4e73ea14ce145a270655ca05300f658718f9bd0b2bb870116d36e8ebb2293051" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2861da62a23624544a00b3025059d87b7a318f0687801dcf65a8a98be3a31114" name="krb5-server" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="ebc29134928991a21983aeaa4431c99b35ec801eca0e57b62552949db93146f2" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
</package>
<package pkgid="7a2a7031528ccb2e37fba2beefa51ced6752b963d63ecf4c9a723184f8bd2855" name="krdc" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="71a632f0322f016bd0dcfe1a6490890ec2a5595e367f638686c15104e5c352c1" name="krdc" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="eb714cd1e984d325aa452b925cf956434ab050a86fae1ebab400e766dbb1b45a" name="krdc-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="32c4788d26c7ce95148edb00b42999c2c9059225eecaf5668849dda9992779cd" name="krdc-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="363bf63c3849a425794a68b6686cde08820d98627033866a8771235a1091392b" name="ktnef" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="12a71d8c00d78d1879eca15229cf9647ad75bb7ea4499cb4c15f0f7a4d6e0372" name="ktnef" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="e7acc2c2203500092b11b1f20f93a394398859d4133ce2202d19664197c19ce1" name="kvm_stat" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.7.3.1"/>
  <changelog author="brogers@suse.com" date="1466596800">- initial check-in of kvm_stat package. Previously the kvm_stat
  tool was included with the qemu sources, but because kvm_stat simply
  represents kvm module information, as of v4.7.0 of the linux kernel,
  kvm_stat was included in the tools directory under the linux source,
  hence this package was born.</changelog>
  <changelog author="brogers@suse.com" date="1476705600">- fix conflicts line to be against qemu-kvm, not qemu.</changelog>
  <changelog author="brogers@suse.com" date="1476705601">- soften runtime Requires kernel version to a Recommends since it
  really doesn't fully enforce anything which is "required".</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Simplify copying around</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="brogers@suse.com" date="1532606400">- Add a qemu package conflicts directive since SLE releases provided
  the kvm_stat script via the qemu package, while older openSUSE
  releases had provided it through qemu-kvm, which is already
  handled. (bsc#1102746 related)
- Change package to be noarch. kvm_stat is written in python, and
  is useful to multiple architectures which have kvm support.
- Drop the kernel README and CREDITS files, since they don't really
  represent this package in any meaningful way.
- Minor spec file tweaks performed.</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1541764800">- Add "Requires: python-curses" in kvm_stat.spec as this package
  needs to be installed to make kvm_stat work. (bsc#1114465)</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1542628800">* Incorporating patches and comments produced by Fei Li for
  SLE15-SP1
- Backport 43 kvm_stat patches between kernel v4.16-* and current
  v4.12.14 for the kvm_stat package. Actually some of the patches
  are s390x specific, and some are noarch. (FATE#325017)
  + 0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  + 0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  + 0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  + 0004-tools-kvm_stat-simplify-line-print-logic.patch
  + 0005-tools-kvm_stat-remove-extra-statement.patch
  + 0006-tools-kvm_stat-simplify-initializers.patch
  + 0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  + 0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  + 0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  + 0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  + 0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  + 0012-tools-kvm_stat-add-new-interactive-command-h.patch
  + 0013-tools-kvm_stat-add-new-interactive-command-s.patch
  + 0014-tools-kvm_stat-add-new-interactive-command-o.patch
  + 0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  + 0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  + 0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  + 0018-tools-kvm_stat-add-new-interactive-command-b.patch
  + 0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  + 0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  + 0021-tools-kvm_stat-fix-command-line-option-g.patch
  + 0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  + 0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  + 0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  + 0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  + 0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  + 0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  + 0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  + 0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  + 0030-tools-kvm_stat-add-line-for-totals.patch
  + 0031-tools-kvm_stat-sort-f-help-output.patch
  + 0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  + 0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  + 0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  + 0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  + 0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  + 0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  + 0038-tools-kvm_stat-fix-debugfs-handling.patch
  + 0039-tools-kvm_stat-mark-private-methods-as-such.patch
  + 0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  + 0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  + 0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  + 0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1543233600">- Make kvm_stat use python3 (bsc#1116822)
  + 0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  + 0045-tools-kvm_stat-fix-python3-issues.patch
  + 0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  + 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1543492800">* Changed the spec file to build SLE15-SP1 with the s390x patches,
  and added logic to the spec file to uniquely build Factory and
  SLE-15 as they do not require the first 44 patches, and the code
  base is not the same
- Making kvm_stat use python3 for openSUSE (bsc#1116822)
  - 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  + 0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  + 0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  + 0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1565784000">- Fix our patching for Leap 15.1 (boo#1140899)</changelog>
</package>
<package pkgid="5b4b04d3d294cb1255b95ba1c389995a3f1e58bb41b840fe3ae010d86f7eed16" name="kvm_stat" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.7.3.1"/>
  <changelog author="brogers@suse.com" date="1466596800">- initial check-in of kvm_stat package. Previously the kvm_stat
  tool was included with the qemu sources, but because kvm_stat simply
  represents kvm module information, as of v4.7.0 of the linux kernel,
  kvm_stat was included in the tools directory under the linux source,
  hence this package was born.</changelog>
  <changelog author="brogers@suse.com" date="1476705600">- fix conflicts line to be against qemu-kvm, not qemu.</changelog>
  <changelog author="brogers@suse.com" date="1476705601">- soften runtime Requires kernel version to a Recommends since it
  really doesn't fully enforce anything which is "required".</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Simplify copying around</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="brogers@suse.com" date="1532606400">- Add a qemu package conflicts directive since SLE releases provided
  the kvm_stat script via the qemu package, while older openSUSE
  releases had provided it through qemu-kvm, which is already
  handled. (bsc#1102746 related)
- Change package to be noarch. kvm_stat is written in python, and
  is useful to multiple architectures which have kvm support.
- Drop the kernel README and CREDITS files, since they don't really
  represent this package in any meaningful way.
- Minor spec file tweaks performed.</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1541764800">- Add "Requires: python-curses" in kvm_stat.spec as this package
  needs to be installed to make kvm_stat work. (bsc#1114465)</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1542628800">* Incorporating patches and comments produced by Fei Li for
  SLE15-SP1
- Backport 43 kvm_stat patches between kernel v4.16-* and current
  v4.12.14 for the kvm_stat package. Actually some of the patches
  are s390x specific, and some are noarch. (FATE#325017)
  + 0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  + 0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  + 0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  + 0004-tools-kvm_stat-simplify-line-print-logic.patch
  + 0005-tools-kvm_stat-remove-extra-statement.patch
  + 0006-tools-kvm_stat-simplify-initializers.patch
  + 0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  + 0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  + 0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  + 0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  + 0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  + 0012-tools-kvm_stat-add-new-interactive-command-h.patch
  + 0013-tools-kvm_stat-add-new-interactive-command-s.patch
  + 0014-tools-kvm_stat-add-new-interactive-command-o.patch
  + 0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  + 0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  + 0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  + 0018-tools-kvm_stat-add-new-interactive-command-b.patch
  + 0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  + 0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  + 0021-tools-kvm_stat-fix-command-line-option-g.patch
  + 0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  + 0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  + 0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  + 0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  + 0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  + 0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  + 0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  + 0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  + 0030-tools-kvm_stat-add-line-for-totals.patch
  + 0031-tools-kvm_stat-sort-f-help-output.patch
  + 0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  + 0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  + 0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  + 0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  + 0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  + 0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  + 0038-tools-kvm_stat-fix-debugfs-handling.patch
  + 0039-tools-kvm_stat-mark-private-methods-as-such.patch
  + 0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  + 0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  + 0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  + 0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1543233600">- Make kvm_stat use python3 (bsc#1116822)
  + 0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  + 0045-tools-kvm_stat-fix-python3-issues.patch
  + 0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  + 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1543492800">* Changed the spec file to build SLE15-SP1 with the s390x patches,
  and added logic to the spec file to uniquely build Factory and
  SLE-15 as they do not require the first 44 patches, and the code
  base is not the same
- Making kvm_stat use python3 for openSUSE (bsc#1116822)
  - 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  + 0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  + 0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  + 0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1565784000">- Fix our patching for Leap 15.1 (boo#1140899)</changelog>
</package>
<package pkgid="c42e4635ce2014eed755a113fff53d41627cc136fd49e3e6e22c711e35f01736" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="8f9bba4e66f1183c610bc87b6d14e0ab443758d07f6b258e06a9ef98cc20fabf" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="275c8556202ddf1635c498d3a47ed68a2c27463d5bceae719433e843dae56313" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="0d78089c2515a09d95052cd907ebf57c59598fec1b35cf4a0145ea18f5f0547e" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="9c86b6e09b32ceb8df360ebe94a284755e153e0751eca78000b4e8cf8678f12e" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="lp151.3.12.1"/>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572264000">- Update to version 4.3.0184.6ee15eb2:
  * Add missed requirement
  * Apache resource agent is not working when I set statusurl value (bsc#1138281)
    Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
    (bsc#1154465) Pickup latest changes for aws-vpc-route53
  * Adapt azure-lb Resource Agent to support socat usage too
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * LVM-activate: move pvscan --cache to validate
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * "WARNING: You are recommended to activate one LV at a time or use exclusive activation mode." is annoying.
    (bsc#1151833)
- removed patches which was already applied upstream:
  0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  0007-CTDB-support-Samba-4.9.patch
- adapted patch:
  0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  Remove sensless change in not used spec template file.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1573646400">- Netcat doesn't handle multiple connections, causing issues with
  pacemaker. Netcat doesn't allow to restrict which clients can
  initiate connections (bsc#1150046)
- Included the following patches:
  * 0001-azure-lb-Set-socat-to-default-on-SUSE-distributions.patch</changelog>
</package>
<package pkgid="6fefe8506bf9a541321b298f43d9a40e9849121a49cd5216aaedaa15d1eb7a91" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="lp151.3.12.1"/>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572264000">- Update to version 4.3.0184.6ee15eb2:
  * Add missed requirement
  * Apache resource agent is not working when I set statusurl value (bsc#1138281)
    Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
    (bsc#1154465) Pickup latest changes for aws-vpc-route53
  * Adapt azure-lb Resource Agent to support socat usage too
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * LVM-activate: move pvscan --cache to validate
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * "WARNING: You are recommended to activate one LV at a time or use exclusive activation mode." is annoying.
    (bsc#1151833)
- removed patches which was already applied upstream:
  0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  0007-CTDB-support-Samba-4.9.patch
- adapted patch:
  0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  Remove sensless change in not used spec template file.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1573646400">- Netcat doesn't handle multiple connections, causing issues with
  pacemaker. Netcat doesn't allow to restrict which clients can
  initiate connections (bsc#1150046)
- Included the following patches:
  * 0001-azure-lb-Set-socat-to-default-on-SUSE-distributions.patch</changelog>
</package>
<package pkgid="7382fe5b4bf986e7b9bc50255c1070a5f6d9d3287c0a62a4150d1db254647f4d" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="lp151.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1518004800">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572264000">- Update to version 4.3.0184.6ee15eb2:
  * Add missed requirement
  * Apache resource agent is not working when I set statusurl value (bsc#1138281)
    Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
    (bsc#1154465) Pickup latest changes for aws-vpc-route53
  * Adapt azure-lb Resource Agent to support socat usage too
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * LVM-activate: move pvscan --cache to validate
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * "WARNING: You are recommended to activate one LV at a time or use exclusive activation mode." is annoying.
    (bsc#1151833)
- removed patches which was already applied upstream:
  0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  0007-CTDB-support-Samba-4.9.patch
- adapted patch:
  0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  Remove sensless change in not used spec template file.</changelog>
</package>
<package pkgid="d78f1ae9b733b5e50a10ce2f17b12fa1b898ad5c00af5640aba2a8e3e1dc0323" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="lp151.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1518004800">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1572264000">- Update to version 4.3.0184.6ee15eb2:
  * Add missed requirement
  * Apache resource agent is not working when I set statusurl value (bsc#1138281)
    Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
    (bsc#1154465) Pickup latest changes for aws-vpc-route53
  * Adapt azure-lb Resource Agent to support socat usage too
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * LVM-activate: move pvscan --cache to validate
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * "WARNING: You are recommended to activate one LV at a time or use exclusive activation mode." is annoying.
    (bsc#1151833)
- removed patches which was already applied upstream:
  0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  0007-CTDB-support-Samba-4.9.patch
- adapted patch:
  0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  Remove sensless change in not used spec template file.</changelog>
</package>
<package pkgid="be9dc7423cf6354a12075de969f63190d02325cfb5175a9412281a19b447b1dc" name="ledger" arch="src">
  <version epoch="0" ver="3.1.3" rel="lp151.3.3.1"/>
  <changelog author="jmatejka@suse.cz" date="1421928000">- Init package</changelog>
  <changelog author="jmatejka@suse.cz" date="1423224000">- Install license file</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438516800">- Fix build with boost 1.58:
  * add ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * add ledger-3.1-fix-build-with-boost-1.58.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1453896000">- update to 3.1.1
- drop  ledger-3.1-fix-build-with-boost-1.58.patch
    ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * Added a --no-revalued option
  * Improved Embedded Python Support
  * Use ./.ledgerrc if ~/.ledgerrc doesn't exist
  * Fixed parsing of transactions with single-character payees and comments
  * Fixed crash when using -M option with empty result
  * Fixed sorting for option --auto-match
  * Fixed treatment of year 2015 and Y2014 directives
  * Fixed crash when using --trace 10 or above
  * Build fix for boost 1.58, 1.59, 1.60
  * Build fix for Cygwin
  * Various documentation improvements
  * Examples in the documentation are tested just like unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1473768000">- 465.patch
  + Fix compilation with Boost 1.61 (boo#994382)
  + upstream PR https://github.com/ledger/ledger/pull/465</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- cleanup specfile - install license as %license
- boost_168.patch: fix building with Boost 1.68. Sha1 compatibility
  header was removed from Uuid library (boo#1105084)</changelog>
  <changelog author="lars@linux-schulserver.de - 3.1.2" date="1553083200">- update to 3.1.2:
  + Increase maximum length for regex from 255 to 4095 (bug #981)
  + Initialize periods from from/since clause rather than earliest
    transaction date (bug #1159)
  + Check balance assertions against the amount after the posting (bug #1147)
  + Allow balance assertions with multiple posts to same account (bug #1187)
  + Fix period duration of "every X days" and similar statements (bug #370)
  + Make option --force-color not require --color anymore (bug #1109)
  + Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  + Add support for --prepend-format in accounts command
  + Fix handling of edge cases in trim function (bug #520)
  + Fix auto xact posts not getting applied to account total during
    journal parse (bug #552)
  + Transfer null_post flags to generated postings
  + Fix segfault when using --market with --group-by
  + Use amount_width variable for budget report
  + Keep pending items in budgets until the last day they apply
  + Fix bug where .total used in value expressions breaks totals
  + Make automated transactions work with assertions (bug #1127)
  + Improve parsing of date tokens (bug #1626)
  + Don't attempt to invert a value if it's already zero (bug #1703)
  + Do not parse user-specified init-file twice
  + Fix parsing issue of effective dates
    (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  + Fix use-after-free issue with deferred postings
    (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  + Fix possible stack overflow in option parsing routine
    (bug #1222, CVE-2017-12481)
  + Fix possible stack overflow in date parsing routine
    (bug #1224, CVE-2017-12482)
  + Fix use-after-free when using --gain (bug #541)
  + Python: Removed double quotes from Unicode values.
  + Python: Ensure that parse errors produce useful RuntimeErrors
  + Python: Expose journal expand_aliases
  + Python: Expose journal_t::register_account
  + Improve bash completion
  + Emacs Lisp files have been moved to
    https://github.com/ledger/ledger-mode
  + Fix build under MSYS (32-bit).
  + Fix build under Cygwin.
  + Various documentation improvements
- removed upstreamed patches:
  + 465.patch
  + boost_168.patch
- add libboost_system-devel as build requires
- package the bashcompletion script as config file
- re-introduce BuildRoot and defattr macros for older distributions
  (they don't harm on newer ones, so don't use a if condition)
- get rid of the suse_version conditional for boost libraries, as
  the package gets build only from SLE-12 and beyond anyway
- do not use macros in the URL, as OBS is not expending these for
  the WebUI</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1554811200">- Update to 3.1.3:
  + Properly reject postings with a comment right after the flag (bug #1753)
  + Make sorting order of lot information deterministic (bug #1747)
  + Fix bug in tag value parsing (bug #1702)
  + Remove the org command, which was always a hack to begin with (bug #1706)
  + Provide Docker information in README
  + Various small documentation improvements</changelog>
</package>
<package pkgid="588c02874a9598c297d61ff1e1bb99335e011b2671c249a465949ddbb5e58c3d" name="ledger" arch="x86_64">
  <version epoch="0" ver="3.1.3" rel="lp151.3.3.1"/>
  <changelog author="jmatejka@suse.cz" date="1421928000">- Init package</changelog>
  <changelog author="jmatejka@suse.cz" date="1423224000">- Install license file</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438516800">- Fix build with boost 1.58:
  * add ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * add ledger-3.1-fix-build-with-boost-1.58.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1453896000">- update to 3.1.1
- drop  ledger-3.1-fix-build-with-boost-1.58.patch
    ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * Added a --no-revalued option
  * Improved Embedded Python Support
  * Use ./.ledgerrc if ~/.ledgerrc doesn't exist
  * Fixed parsing of transactions with single-character payees and comments
  * Fixed crash when using -M option with empty result
  * Fixed sorting for option --auto-match
  * Fixed treatment of year 2015 and Y2014 directives
  * Fixed crash when using --trace 10 or above
  * Build fix for boost 1.58, 1.59, 1.60
  * Build fix for Cygwin
  * Various documentation improvements
  * Examples in the documentation are tested just like unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1473768000">- 465.patch
  + Fix compilation with Boost 1.61 (boo#994382)
  + upstream PR https://github.com/ledger/ledger/pull/465</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- cleanup specfile - install license as %license
- boost_168.patch: fix building with Boost 1.68. Sha1 compatibility
  header was removed from Uuid library (boo#1105084)</changelog>
  <changelog author="lars@linux-schulserver.de - 3.1.2" date="1553083200">- update to 3.1.2:
  + Increase maximum length for regex from 255 to 4095 (bug #981)
  + Initialize periods from from/since clause rather than earliest
    transaction date (bug #1159)
  + Check balance assertions against the amount after the posting (bug #1147)
  + Allow balance assertions with multiple posts to same account (bug #1187)
  + Fix period duration of "every X days" and similar statements (bug #370)
  + Make option --force-color not require --color anymore (bug #1109)
  + Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  + Add support for --prepend-format in accounts command
  + Fix handling of edge cases in trim function (bug #520)
  + Fix auto xact posts not getting applied to account total during
    journal parse (bug #552)
  + Transfer null_post flags to generated postings
  + Fix segfault when using --market with --group-by
  + Use amount_width variable for budget report
  + Keep pending items in budgets until the last day they apply
  + Fix bug where .total used in value expressions breaks totals
  + Make automated transactions work with assertions (bug #1127)
  + Improve parsing of date tokens (bug #1626)
  + Don't attempt to invert a value if it's already zero (bug #1703)
  + Do not parse user-specified init-file twice
  + Fix parsing issue of effective dates
    (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  + Fix use-after-free issue with deferred postings
    (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  + Fix possible stack overflow in option parsing routine
    (bug #1222, CVE-2017-12481)
  + Fix possible stack overflow in date parsing routine
    (bug #1224, CVE-2017-12482)
  + Fix use-after-free when using --gain (bug #541)
  + Python: Removed double quotes from Unicode values.
  + Python: Ensure that parse errors produce useful RuntimeErrors
  + Python: Expose journal expand_aliases
  + Python: Expose journal_t::register_account
  + Improve bash completion
  + Emacs Lisp files have been moved to
    https://github.com/ledger/ledger-mode
  + Fix build under MSYS (32-bit).
  + Fix build under Cygwin.
  + Various documentation improvements
- removed upstreamed patches:
  + 465.patch
  + boost_168.patch
- add libboost_system-devel as build requires
- package the bashcompletion script as config file
- re-introduce BuildRoot and defattr macros for older distributions
  (they don't harm on newer ones, so don't use a if condition)
- get rid of the suse_version conditional for boost libraries, as
  the package gets build only from SLE-12 and beyond anyway
- do not use macros in the URL, as OBS is not expending these for
  the WebUI</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1554811200">- Update to 3.1.3:
  + Properly reject postings with a comment right after the flag (bug #1753)
  + Make sorting order of lot information deterministic (bug #1747)
  + Fix bug in tag value parsing (bug #1702)
  + Remove the org command, which was always a hack to begin with (bug #1706)
  + Provide Docker information in README
  + Various small documentation improvements</changelog>
</package>
<package pkgid="dba8952723b47ba726ff5e3483cc25de027f066b95f8f48767d0db5678d94c5f" name="libBasicUsageEnvironment1" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="81f67f8d40cc01f4271c5e18929f45b790727c59a8799328eb238ce1d4728fed" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="37647e074f19011dd5b5fa8f8acc70e9c2dbece6f462250183a5d7a1abc9f4a5" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="7f23d0d14046688b09bb33f8cb07621e1599fae31c5a27cbb046355b4a7fe806" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="35dd2b4b7f4e5b156c145fa23398ce13b90e66bebb96e948556f1b62b7d9d588" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="9cfba349f0b3b4379a9d56b844aacf4f64b6a814a277765bbb9cfe8e913d1f3f" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="b41ffe6af66ba58b9a255be712516e70ac6b18b8b3376bbabaf31af7b21d4b53" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="f0a2610cb6b61e2c381041fac37b00082483fc3d56d3f25888d024e6da53eca0" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="6020c5d4350fa4c981b3d39c94e8d75bd2a05ba5f57997d259a7e95dd9b221b1" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="612d33ca350ce3cdee7a1632220f53573869bea89230a875c649f692f6d50a7d" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="4b35e89dd969f4534824d0eb91580f2a9621f4b667a6c85871dd390f57fdc342" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="75dd2e927b2452b1f1630ee69d1744ed71fa2baa1bab82a226cb161c5dbede97" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="4afe56fa9ea2df1501479ea757005fa81ea6aaf82bad58e36fbf2d6805c7d124" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="3f3259870168209959cfd2ac4668b931dd21b2a5abfff1cb4a7dd28163c5751a" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="f3ba55b087f2605effabccbda46c2499b479ed1c18ac24b9f133643a7a59fe9f" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="fc5464b4d7356acd1726bb28632a2c6dd753b2c4e32a993e0234594ef86a105d" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.9.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="01924cc9cd3f5cb51949c017806c9ffa89d88ab8e38352b522b636c00123de8e" name="libIlmImf-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="476e33a6e252ab54a59a964d89969e25c2efd3d4651bb16ed386d048d4326512" name="libIlmImf-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="df15bcd767ac3a9799cf756357ecee2beaa9d184427a24ae4709e76cedbadeae" name="libIlmImf-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="beb6046748363dc591efd9a7d98c7afe2f1612909c9e5672223f4ca1bb894f33" name="libIlmImf-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="9df95ca2b93adde59fbd435ea0b7cba29ec49dd780c9b6f58d0ba07c74eb24ef" name="libIlmImf-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="77dc095533c43206a04e72f40fb285829de00cd625c067bf649c316c1ce4f7f8" name="libIlmImf-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="80920ec21b16021c75fafed1d95628e5082089cd500cc2af7d786c614fa2c181" name="libIlmImfUtil-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="cd42ae6c39ab069367a0fe99bee8d28465f54e64402cff814ea29af6fa29297b" name="libIlmImfUtil-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="bb3f4848a1b6fa7258f69963dab95f96a441c83ef4596bb76aabe4b30386b652" name="libIlmImfUtil-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="198d58dc1dc576c019862177a864d5e0692e213098fdb1febc606a4239544c92" name="libIlmImfUtil-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="d4d27290fbad261b26c5aaa4bfed149710879061528a74f7d21d0901e389d81e" name="libIlmImfUtil-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="efcdb5af675d83f70198327c3063be0d90dbbb7e89b3bfbc586631e381c44b7b" name="libIlmImfUtil-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.6.1"/>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
</package>
<package pkgid="e2b9c6b19313ac5b7210f2137be0a59c40014528a5a8ac72a5fdcf0e2985c0eb" name="libKF5AkonadiAgentBase5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="2ff80645ce9bc06108b414c09d634dafc1cd9fc7351a77c6ff61704522cdcd6b" name="libKF5AkonadiCore5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="a14e33febb69fc119458e4060baaaa50f6b0a16521b4bcb628163dcd86b7c2f6" name="libKF5AkonadiPrivate5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="6e17534b9fd69ce2a6c46128c5117972dd216bdcfa1cad0bacd7d02ee5e68676" name="libKF5AkonadiWidgets5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="f2b87573575ed9106de35f36dd233005492223decc649edef079359f4b7519d8" name="libKF5AkonadiXml5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="5357fb2e46ca1c61e04c498c657ecbf18b94192b18a49571e27efcfc4960a892" name="libKF5ConfigCore5-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="2007d805ac89852c28d263d3aa3475c82e7c8c4cfbc490c74d303938c61fc7c0" name="libKF5ConfigCore5" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="fa226b7c796ce5cd4bd56fccdb173924a92e482805e8122bd226f28ef48b72fa" name="libKF5ConfigCore5" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="0557d85b2621141a86a16c5c9424d27f226fa9afbb66410da5ac0cecebb5833b" name="libKF5ConfigCore5-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="b03cd567e66db9fc64c13a21a54e44c319cf1b0e127b24b2171b255825dda0dc" name="libKF5ConfigGui5-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="8ceab2646da48d551cc7ef00debebb2206fd2b6b15be14eacfa18a4afeff2b7e" name="libKF5ConfigGui5" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="3ca1adf4848d133c440d43982b2bbac17398757287d2d6ad497d98d0d8189ce6" name="libKF5ConfigGui5" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Don't build the kconfig_compiler tests when crosscompiling</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * KConfig: fix autotest on CI with trailing slash in HOME.
  * Repair broken test after commit ee2b394599.
  * Fix some clazy warning
  * Use Q_FALLTHROUGH
  * Don't look for /etc/kderc every single time</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove cmake warning about generating moc file
  * API docs: Sergio suggested create(), more readable than winId()
  * API docs: full working code, including workaround for Qt issue...
  * API docs: explain how to use KWindowConfig from a dialog constructor.
  * Deprecate KDesktopFile::sortOrder()
  * Fix the result of KDesktopFile::sortOrder()</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use Ctrl+Shift+, as the standard shortcut for "Configure &lt;Program&gt;"</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Save some memory allocations by using the right API
  * Export kconf_update with tooling</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Fix autotest
  * Remove useless QT_VERSION_CHECK
  * Remove not necessary QtCore and co
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Use override
  * Warning--
- Refreshed patches:
  * kconfig-desktop-translations.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * KConfigCompiler_Test: Update test_signal.h.ref to follow the generated file
  * kcfg.xsd - do not require a kcfgfile element</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Remove unused include</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Remove warning about old kiosk feature that no longer applies.
  * Set system default shortcut Ctrl+0 for "Actual Size" action
  * Fix cleanup of kconfigtest kdeglobals</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Remove misleading use of KDE_INSTALL_PYTHONBINDINGSDIR
  * Fix issue when reading path lists
  * API dox: 0 -&gt; nullptr
  * kcfg_compiler now documents valid inputs for its 'Color' type
  * whitespace cleanup
  * Port deprecated method + use strict compile flags</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variable
  * Fix logic error in NotifyFlag testing
  * Set explicit arg type in QCOMPARE
  * Fix compilation without D-Bus
  * Add mechanism to notify other clients of config changes over DBus
  * Expose getter method for KConfig::addConfigSources</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * normalize signal/slot</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544875200">- Use noun phrase in summaries.</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Fix doxygen markup in KConfigWatcher
  * Fix a regression introduced in 6a1852
  * Fix build without D-Bus
  * Deduplicate reference value
  * Remove unneeded qWarning
  * Escape bytes that are larger than or equal to 127 in config files
  * Fix documentation, QValueList isn't a thing anymore</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * [API dox] Include kconfig_compiler/README.dox for QCH generation
  * kconfig_compiler: delete the assignment operator and copy constructor
  * KEmailSettings: Delete copy constructor and assignment operator
  * KonfUpdate: delete copy constructor and assignment operator</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="a70ea3f782e41cd09278157f27f44d50aa25b22185b051696e29966f184fcde2" name="libKF5IdentityManagement5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="386b645e2bf5ae96032ad96bb8cc68b811ef97b74af25419a5247472adba368f" name="libKF5Plasma5-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="451860315953d5972cd9f088f8b9a4b5cf2084337cf9e8c735697c821032e6b5" name="libKF5Plasma5" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="1650e95e8a892cb68b32f1717fb86ff2715a848b372dc14abad600c97305acb6" name="libKF5Plasma5" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="8baaa103c6d663c46b65103cce7dbe82c1df8d0f61d8c3749526c4f31a9a014b" name="libLLVM7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="7bc49699c5dc06dcd6c5ec3c0408f50bbde2b9929123c59c535f3ec1eddd2309" name="libLLVM7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="ec005bb3c8ed03e28bc3b1c0fbdf28a5bbfc9ab39b093dfc8b7d54a6d428ed76" name="libLLVM7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="524aa240da71f6b75f6d39e34279af95a67325ef63db89733c428634fa5cb411" name="libLLVM7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="d73c892da6cc2fa48cb8face3be9a3f92b40ddda83829457079b746c610d691e" name="libLLVM7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="d51b7d60c406b1f51d138130ffdf4f52ce31b8f0846694594d4bb969ee3a5391" name="libLLVM7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="cea6309a34becc3c5e3412393e4ece95e9e54bb635aee7b8942ed163a18df887" name="libLTO7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="2203e2e8e99e86de028671d98dc1f0393abcf8f56178891aecbe7b28b66e42f8" name="libLTO7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="196c1ddde5b32874d5fd902f8a22593ec5ba52934aa8ae4caab27618257d4b21" name="libLTO7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="6263eb28c333b51b5e9f8bbd71042f930b6e5fe5d8393985b4075d931ffa6460" name="libLTO7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="99aae1f65b89367f84821951d7ce934cb0e674383d1597b97b953f9d004436e7" name="libLTO7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="8deffa113ec82dfef69af45d898612bcb68b31b385c500c9498c358c3afd94d1" name="libLTO7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="f381597ccfd9fb0a65e18c03c4cfb3525e7aa3c3a6dc5673a269c06849991f94" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="966521c35559ffd0d70eff29c1364128a3738ac44384fdcea114f341dc6f502d" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="c1b3f3f90510580f5b4e9d1e34ed0c22d6e1f913a4fd7b4463d280af213ea7bb" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="d1dc94a64f0b0e1ff88225023ff3106625478d36ea74679971976427279ae40e" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="d6411eb75928e19f8709977d74b87e84da4b859e09769ec3041f50b98451b161" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="c4177534f0bc946bd31a490753de7cac33bfb78b414f88aad1d587d3cda38ae5" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="d0fd5e1583ec7bf51f1302132daa107611f7628757c313cc76504b9160735e3f" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="59470c273f847767886eda0159f28de6203e1e79477b18f1c39e50aa8603f908" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="6f1749a0fcf887b0942423cb5ea859ecfa64ea2e3e97beee6d4614dacad664f4" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="487f4378f2ed6d1854ea2be02651644dbd923e28a210eb5b8059872246a1df96" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="36e679ce6c921379b9aa2b7677d5f9378e3473e9222f08a0902c8986952da7f0" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="22d74b0140a2a99e5d2ac77328f8a4b70649714ea83a3cb09a8dcc117fda98c7" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="d2bd2b3149bb5212769b7766d34f89ee75f112055e7e39b4fe87a2ad2392e823" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="f0e961b435cf8b3abc8decdf5d7b0e2f0ef4363103ced4458da7696232a86003" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="2af1dd11319da4282978a4916e55c73cac0ea43ef7153512513eee9de0c76d91" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="46bbfca0e7d1417282a46c7398f174b28347d63a0ab80308045307d7fb37f807" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="5204b572498abb4174c73465fa4c2170a43ab90ef0814904cbee75e7c82277bb" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="aa30befa5c04f2738702da1bdf8d8cd18cc711e5d5e3d5da3b1b83df99614ab9" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="fa4b53f6e31e7f105a070b29595626051d353bc9be2e913716ea5c88b2b3e866" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="f7882fb7acb1b7a7ba6b6f23edc4d0605e10d5a885a59382eac2911fe6c33421" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="a5f31729a5f2767732a857f42d19b154017f3a8e76eb40fefbabaddb02eef37b" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="7cb5dec0fc68f3f401718a63bf4a482b43530cdd857c89db26590a9c3d408326" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="9cea59bf81d605a44ccb97369f205695a77a23f8227e4147ef0821cff7e34d2a" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="19c784d9c87a904ab69efc48efdc678e5b99fbea9bbcfb471e91de65f2dd3576" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="a57079aba19c6d907a5717c1d2d53eb8f0f753d83f6f18de38b517706052516e" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="ab9a2608d3855ab22cd29cc330c06e6354f841d53c3e6094c2afbe799b6816ad" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e4f9fe5df37b523f88f050bfa3215072bc696476271bbb011a15fea01f5c75e9" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ab09da520ab61e9ca8a96bff8e3ffc7ae4875fa2d5ed8ec0ea58fd3ca1689697" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="bbe44388ae97e7a8e9587d8f95a2fd336d3f0c2bebe73f635d1e7a637439c480" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="32cdfce955a1cfe6ea61f60542936746a7debe870aeb5228c3ca778818b3c9ad" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="0d720f338eadd9768b72d2c8d187c32228fc33aac388c909a7ac74c9b951939d" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0cc444fbdc7810f70d99f2863e134dc666aeacbec24186595c85616b612f175a" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="9ed715195e9a2389b2a36e6c951a506874e6acda42716dd9d0fff1c29fd5f308" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c56500c6038c3a361c9b5be3c405072f783f523d0cbe9a308185e8708816c0f7" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="95341f6b6b3cf32c4e37e53d825d37e3038cd681c39dee9f4a63ce2118226368" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="33fc7b5bd1cee7c2d80095f6b5fa6ae917417f1aad9692ef8cd390ebcaaee70b" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="dba06cc0deb967715fa889eae890b6866e5497fc9e511dd5c256f037a1fd5aa4" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="4bcd0b9a65a3a2d6244e36969e3bb0ea3bb6e42b26eba41a162719af3c5ce362" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="919c3c5545ac6157e505ecd6dcafd4ce41906a1955f8e149ef05121c83a27608" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="3464a97b7f4b3110a9d0cc3ed153c113e7fccd808698dce4850cae9dfde7acfd" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="cdfc280eab19a101475c358b01d5191f493090d36c243844008c863e9b077a99" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="b04d0a6719bfd5586903d196d4445cd863218cf5c7bfe0b519e82a1545eccc69" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.12.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
</package>
<package pkgid="e10aa9d9670521e60fe58de41957143ebd868b2aaf3c415f781a2b880bcd384c" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="42b799c2ce13290a199ea9301eac2799d9a0f14043f4d2ff82a39780bc7a5286" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="732218940c3f8d6bc12e48641ca4da42f8f28d1b2ee249e8f4d5027e1280e53b" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ddfbe16a68d19faa0c2104da3c86eda8654cdf7ed8bda334a1e36af8c582c9ea" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="23607d0ac31998a8dbadf803cc2f8e0f1af757de51385aafaffe8df4fab9cc87" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="650cc0556cb7cdc7ee80573e65713989ceba958e7ce10fba11f36006fb2f64c9" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.9.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="1cddfd002f40802cb2babed6f82c0d65182e205e824acae15ca5e11ac9d948e5" name="libOSMesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="0d1562c93d12038f53708261c6b2ed45ee90453ae6165c8e120ed7f8dedbe9ed" name="libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="072559e638e16c7b81f4f8dccd1c4f408d9b213cbfe733751c67bf52d69f68aa" name="libOSMesa-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="9a341cbe7c6a87bb53e11de74f532ab58dbafce98edce4545af693f1634d82c0" name="libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ec80ec1cc6e0b7d891015d5fe1d1110e3f3e406ad48c2ea4f067e2fb0d5f3324" name="libOSMesa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1e7d34d349a6a2cd161ffe323f6539d2b6db0768e90353883d0c078cf9e9790f" name="libOSMesa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="5cec3cdd338145786fc83bb1c68aa85eca0a52e1cd2e81d6007e68d630c56cbd" name="libOSMesa8" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="982068ec8de05c17df8e9035085c1b8304b88a0715c0e9a5062a9b66b9407f77" name="libOSMesa8" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="12b523a5498ffbff9cf69719d2ff94b66e3fca71a1312a28448f140263e052c0" name="libOSMesa8" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="bf7800769b1d63e513f172c544cfe3eb2a2000de07e5969818e7e4f28031aac9" name="libOSMesa8" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="5b6c9ca58175e0228351c49aeb1996cdd394a5c93134200c31a893b871810eaf" name="libOSMesa8-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="56db312f37a6d360a2bf9f237eda154f9d68a8fed27ef5d6b3f04d5abbae008f" name="libOSMesa8-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="c4241d7ae9a2599c39df91dc9492f9730ddfaf24ae4bbe018211688c8d602db6" name="libSDL2-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="cee782036b0698c92e4becf68e54c4e2705af9291551c2195cb6c3598d374e5f" name="libSDL2-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="66c12cc98e5b64f2b1218c90cfd9797ebaf8239fab57fa63ac313dd43ff9db14" name="libSDL2-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="910dc90b69ec57ac24e9f129757eb478995d4843630df2aa9eeef0d679366a7d" name="libSDL2-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="1b3f3b6a22714fe6d76467d67582043acd1691a500acb8f01c651c343dc80acb" name="libSDL2-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="75a0d1f64127311e54a2dc6a85476f4e291d96a249d1dc045838febc6ab36439" name="libSDL2-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="0671e5fa34bd92cf77003f343ed5c9212d2721c33b59011329e95b9805db9124" name="libSDL2-devel" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="3f21808b24a2f7b3138366536dfe9ea286d12dc5098f61503a0848b67a94614a" name="libSDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="80a4b7b36b91a1a8a6556b8d4741a649c7f98cf361f7281390b570b59c837e46" name="libSDL2-devel" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="f7a1fcc7f6701e79628f027938921ec039dbff467d7378412b1a00dfbf77b208" name="libSDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="5945bc91f54d6321673e812132898ba15e459134e1d4e4a8f0869f92da695558" name="libSDL2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="b14c5daabd2704c56a49331d4753d1ce3327d22a921b04387fe2a7d032db0e4a" name="libSDL2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.6.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="5277d8fafeb030740c11d85fbef1febc3e629f7f501ed85a5c4fb979ee2ab94c" name="libSDL2_image-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="a7d46481127d1e0cccfb5fdc2541f95ca02e6ccbbc484708e09513b5480e1c62" name="libSDL2_image-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="fcb3b95121d9a56f4b020f0e2e504be56aaa964886d7dbc41570af613a8761b4" name="libSDL2_image-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="e745c36086517a8f53927c6ff793d5baf29048c168e73ae12baccbb43e070318" name="libSDL2_image-devel" arch="i586">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="e18beaf5bb6ba8989c1cf757935e395db2637450db1020781c04af623ac92699" name="libSDL2_image-devel" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="b314bbd9303ffdefbbcf3eca9c226bb22ee19404414cbc1b4304821dbea7389b" name="libSDL2_image-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp151.2.5.1"/>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="a2b8f25e479d18d459a7cd2e30d82ee84b3601d9967cef0390a1f910648e26c8" name="libSDL_image-1_2-0" arch="i586">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="40548150455c3f7c4c998295b231bef7b0918d695d25f715ba53c06b17f9f91e" name="libSDL_image-1_2-0" arch="x86_64">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="deb532de16e433cb1be1cf9e4f6e5a0437bcf55c0dd4357e1557e1ccdd5bf519" name="libSDL_image-1_2-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="b376a56a7ec855ee1cc98544a84cc920b36e9b279386c504208a9986e6d47a5a" name="libSDL_image-devel" arch="i586">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="ce950d9600b322c95f011c8edb3a4fed80cccc753e3462d86918f0cfbf707481" name="libSDL_image-devel" arch="x86_64">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="61d020d71e1e36a3473293fbd9b75881ad57b647d914c74a855735390a4a05c0" name="libSDL_image-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.12+hg695" rel="lp151.3.3.1"/>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="ef230c1301dc1a5ec81fd352621aabc0af4a7130fd89838d2feceefcd2bb5b56" name="libTMCG" arch="src">
  <version epoch="0" ver="1.3.18" rel="lp151.3.3.1"/>
  <changelog author="toni@links2linux.de" date="1178798400">- Initial package 1.1.1</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1333195200">- update to 1.1.2
- fix most warnings and errors for current openSUSE standards</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422187200">- verify source signature</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- update to 1.3.0:
  * remove some issues found by coverity scan
  * add undocumented protocols and experimental support for
    distributed key generation
  * Verifiable setup of VTMF group generator
  * For some advanced protocols (e.g. Groth's shuffle) with more
    than two parties the distributed coin flipping protocol (EDCF)
    should be used.
- includes changes from 1.2.0:
  * The default security parameters have been updated to current
    state of the art
  * The complexity of hash function g() was improved
  * Non-interactive versions of the verifiable shuffle resp.
    rotation protocol provide more efficient instantiations with
    soundness based on the well-known Fiat-Shamir heuristic
  * stengthen interactive versions of the protocols against
    malicious verifiers by coin flipping between prover and
    verifier
  * include  protocol for reliable broadcast
  * improved documentation
- includes changes from 1.1.3:
  * VRHE scheme provides an efficient HVZK argument for cyclic
    shuffle
- includes changes from 1.1.2:
  * Small bugfixes have been applied in order to compile with gcc
    4.3.x</changelog>
  <changelog author="astieger@suse.com" date="1495800000">- update to 1.3.1:
  * VSSHE: added a simple variant of SetupGenerators_publiccoin()
  * DKG: use very strong randomness from libgcrypt (long term keys)
  * RFC4880: added implementation of Partial Body Lengths</changelog>
  <changelog author="astieger@suse.com" date="1515931200">- update to 1.3.9:
  * fix two minor bugs in the OpenPGP implementation
- includes changes from 1.3.8:
  * The S2K count for OpenPGP private key encryption has been
    increased to a reasonable value
- includes changes from 1.3.7, 1.3.6, 1.3.5:
  * minor bug fixes
- includes changes from 1.3.4:
  * DKG tools removed, deparate project DKGPG
- includes changes from 1.3.3:
  * Small enhancements for DKG tools
- includes changes from 1.3.2:
  * Major improvements for distributed key generation (DKG) and
    threshold cryptography</changelog>
  <changelog author="kbabioch@suse.com" date="1516017600">- update to 1.3.10:
  * Introduced RSA signature generation/verification for OpenPGP
  * Add function for preparing certification signatures</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Compact description for size. Outright trim SRPM description.
- Do not ship static libraries.</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to 1.3.11:
  * Improved libTMCG initialization (init_libTMCG())
  * Better handling of RFC4880 functionality
- Switched sources to https instead of http</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to 1.3.12:
  * Added function mpz_lprime_prefix() for k-prefix tweak
  * Improved strength of oracle hash function g() by second algo
  * Raised the requirement of libgcrypt version to &gt;= 1.7.0
  * Improved on RFC4880 handling
  * mpz_shash: bugfix changes the output of hash function g()</changelog>
  <changelog author="kbabioch@suse.com" date="1529928000">- Update to 1.3.13
  - Lots of major improvements for undocumented OpenPGP interface
  - PRNG from Botan is used as additional source of randomness
  - SHA3 is emulated if runtime version of libgcrypt is too old
- Applied spec-cleaner</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530014400">- Fix install-info usage.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536580800">- Update to version 1.3.14
    With this release three additional parameters for the control of secure
    memory allocation have been added to init_libTMCG(). They are explained
    in the reference manual. Moreover, the OpenPGP interface has been
    enhanced in several way, e.g., ECDH, ECDSA and EdDSA are supported now.
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.3.15
    This is a maintenance release that fixes some bugs, e.g. in the Botan
    support of functions from module mpz_srandom. Moreover, some interfaces
    of the OpenPGP implemenation have been added and removed. For some
    modules of LibTMCG a basic exception handling has been introduced.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1543838400">- Update to version 1.3.16
  * changed constant TMCG_MAX_CARDS (decreased by factor 2)
  * changed formulas for TMCG_MAX_VALUE_CHARS and TMCG_MAX_KEY_CHARS
  * RFC4880: added support of Preferred AEAD Algorithms [RFC 4880bis]
  * RFC4880: added output for key usage "timestamping" [RFC 4880bis]
  * RFC4880: changed tmcg_openpgp_byte_t: unsigned char -&gt; uint8_t
  * RFC4880: added PacketAeadEncode() [RFC 4880bis]
  * RFC4880: added SymmetricDecryptAEAD() and SymmetricEncryptAEAD()
  * changed formula for TMCG_MAX_KEYBITS (increased by factor 2)
  * mpz_srandom: bugfix in Botan code branch of mpz_grandomb()</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1548244800">- Update to version 1.3.17
  * VTMF,ASTC,DKG,VRHE,EOTP,COM,VSS: make CheckGroup() more robust
  * VSSHE: security bugfix for Verify_[non]interactive_[_publiccoin]
  * mpz_spowm: added check for correct base in fast exponentiation
  * mpz_sqrtm: remove unused parameter in tmcg_mpz_qrmn_p()
  * configure.ac: added compiler option "-Wextra"
  * mpz_sprime: added tmcg_mpz_smprime() with increased B = 80000
  * RFC4880: changed type of tmcg_openpgp_mem_alloc to unsigned long</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.3.18
  * This release is two-fold: first, it fixes some bugs (e.g. iterated S2K)
    of the OpenPGP interface, and second, it adds functionality for handling
    v5 keys and signatures (see RFC 4880bis-07).
- Re-freshed keyring file with current version from upstream</changelog>
</package>
<package pkgid="716f56db02a93dd64b9c815bc81324e8e1f9ec3116f4282dcc5545e65e20e789" name="libTMCG-devel" arch="x86_64">
  <version epoch="0" ver="1.3.18" rel="lp151.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422187200">- verify source signature</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- update to 1.3.0:
  * remove some issues found by coverity scan
  * add undocumented protocols and experimental support for
    distributed key generation
  * Verifiable setup of VTMF group generator
  * For some advanced protocols (e.g. Groth's shuffle) with more
    than two parties the distributed coin flipping protocol (EDCF)
    should be used.
- includes changes from 1.2.0:
  * The default security parameters have been updated to current
    state of the art
  * The complexity of hash function g() was improved
  * Non-interactive versions of the verifiable shuffle resp.
    rotation protocol provide more efficient instantiations with
    soundness based on the well-known Fiat-Shamir heuristic
  * stengthen interactive versions of the protocols against
    malicious verifiers by coin flipping between prover and
    verifier
  * include  protocol for reliable broadcast
  * improved documentation
- includes changes from 1.1.3:
  * VRHE scheme provides an efficient HVZK argument for cyclic
    shuffle
- includes changes from 1.1.2:
  * Small bugfixes have been applied in order to compile with gcc
    4.3.x</changelog>
  <changelog author="astieger@suse.com" date="1495800000">- update to 1.3.1:
  * VSSHE: added a simple variant of SetupGenerators_publiccoin()
  * DKG: use very strong randomness from libgcrypt (long term keys)
  * RFC4880: added implementation of Partial Body Lengths</changelog>
  <changelog author="astieger@suse.com" date="1515931200">- update to 1.3.9:
  * fix two minor bugs in the OpenPGP implementation
- includes changes from 1.3.8:
  * The S2K count for OpenPGP private key encryption has been
    increased to a reasonable value
- includes changes from 1.3.7, 1.3.6, 1.3.5:
  * minor bug fixes
- includes changes from 1.3.4:
  * DKG tools removed, deparate project DKGPG
- includes changes from 1.3.3:
  * Small enhancements for DKG tools
- includes changes from 1.3.2:
  * Major improvements for distributed key generation (DKG) and
    threshold cryptography</changelog>
  <changelog author="kbabioch@suse.com" date="1516017600">- update to 1.3.10:
  * Introduced RSA signature generation/verification for OpenPGP
  * Add function for preparing certification signatures</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Compact description for size. Outright trim SRPM description.
- Do not ship static libraries.</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to 1.3.11:
  * Improved libTMCG initialization (init_libTMCG())
  * Better handling of RFC4880 functionality
- Switched sources to https instead of http</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to 1.3.12:
  * Added function mpz_lprime_prefix() for k-prefix tweak
  * Improved strength of oracle hash function g() by second algo
  * Raised the requirement of libgcrypt version to &gt;= 1.7.0
  * Improved on RFC4880 handling
  * mpz_shash: bugfix changes the output of hash function g()</changelog>
  <changelog author="kbabioch@suse.com" date="1529928000">- Update to 1.3.13
  - Lots of major improvements for undocumented OpenPGP interface
  - PRNG from Botan is used as additional source of randomness
  - SHA3 is emulated if runtime version of libgcrypt is too old
- Applied spec-cleaner</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530014400">- Fix install-info usage.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536580800">- Update to version 1.3.14
    With this release three additional parameters for the control of secure
    memory allocation have been added to init_libTMCG(). They are explained
    in the reference manual. Moreover, the OpenPGP interface has been
    enhanced in several way, e.g., ECDH, ECDSA and EdDSA are supported now.
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.3.15
    This is a maintenance release that fixes some bugs, e.g. in the Botan
    support of functions from module mpz_srandom. Moreover, some interfaces
    of the OpenPGP implemenation have been added and removed. For some
    modules of LibTMCG a basic exception handling has been introduced.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1543838400">- Update to version 1.3.16
  * changed constant TMCG_MAX_CARDS (decreased by factor 2)
  * changed formulas for TMCG_MAX_VALUE_CHARS and TMCG_MAX_KEY_CHARS
  * RFC4880: added support of Preferred AEAD Algorithms [RFC 4880bis]
  * RFC4880: added output for key usage "timestamping" [RFC 4880bis]
  * RFC4880: changed tmcg_openpgp_byte_t: unsigned char -&gt; uint8_t
  * RFC4880: added PacketAeadEncode() [RFC 4880bis]
  * RFC4880: added SymmetricDecryptAEAD() and SymmetricEncryptAEAD()
  * changed formula for TMCG_MAX_KEYBITS (increased by factor 2)
  * mpz_srandom: bugfix in Botan code branch of mpz_grandomb()</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1548244800">- Update to version 1.3.17
  * VTMF,ASTC,DKG,VRHE,EOTP,COM,VSS: make CheckGroup() more robust
  * VSSHE: security bugfix for Verify_[non]interactive_[_publiccoin]
  * mpz_spowm: added check for correct base in fast exponentiation
  * mpz_sqrtm: remove unused parameter in tmcg_mpz_qrmn_p()
  * configure.ac: added compiler option "-Wextra"
  * mpz_sprime: added tmcg_mpz_smprime() with increased B = 80000
  * RFC4880: changed type of tmcg_openpgp_mem_alloc to unsigned long</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.3.18
  * This release is two-fold: first, it fixes some bugs (e.g. iterated S2K)
    of the OpenPGP interface, and second, it adds functionality for handling
    v5 keys and signatures (see RFC 4880bis-07).
- Re-freshed keyring file with current version from upstream</changelog>
</package>
<package pkgid="de94cd2d72a2dbdf4e90f5d34ceeea3d3c9c6482753ee9db1e5da93447d208bf" name="libTMCG18" arch="x86_64">
  <version epoch="0" ver="1.3.18" rel="lp151.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422187200">- verify source signature</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- update to 1.3.0:
  * remove some issues found by coverity scan
  * add undocumented protocols and experimental support for
    distributed key generation
  * Verifiable setup of VTMF group generator
  * For some advanced protocols (e.g. Groth's shuffle) with more
    than two parties the distributed coin flipping protocol (EDCF)
    should be used.
- includes changes from 1.2.0:
  * The default security parameters have been updated to current
    state of the art
  * The complexity of hash function g() was improved
  * Non-interactive versions of the verifiable shuffle resp.
    rotation protocol provide more efficient instantiations with
    soundness based on the well-known Fiat-Shamir heuristic
  * stengthen interactive versions of the protocols against
    malicious verifiers by coin flipping between prover and
    verifier
  * include  protocol for reliable broadcast
  * improved documentation
- includes changes from 1.1.3:
  * VRHE scheme provides an efficient HVZK argument for cyclic
    shuffle
- includes changes from 1.1.2:
  * Small bugfixes have been applied in order to compile with gcc
    4.3.x</changelog>
  <changelog author="astieger@suse.com" date="1495800000">- update to 1.3.1:
  * VSSHE: added a simple variant of SetupGenerators_publiccoin()
  * DKG: use very strong randomness from libgcrypt (long term keys)
  * RFC4880: added implementation of Partial Body Lengths</changelog>
  <changelog author="astieger@suse.com" date="1515931200">- update to 1.3.9:
  * fix two minor bugs in the OpenPGP implementation
- includes changes from 1.3.8:
  * The S2K count for OpenPGP private key encryption has been
    increased to a reasonable value
- includes changes from 1.3.7, 1.3.6, 1.3.5:
  * minor bug fixes
- includes changes from 1.3.4:
  * DKG tools removed, deparate project DKGPG
- includes changes from 1.3.3:
  * Small enhancements for DKG tools
- includes changes from 1.3.2:
  * Major improvements for distributed key generation (DKG) and
    threshold cryptography</changelog>
  <changelog author="kbabioch@suse.com" date="1516017600">- update to 1.3.10:
  * Introduced RSA signature generation/verification for OpenPGP
  * Add function for preparing certification signatures</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Compact description for size. Outright trim SRPM description.
- Do not ship static libraries.</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to 1.3.11:
  * Improved libTMCG initialization (init_libTMCG())
  * Better handling of RFC4880 functionality
- Switched sources to https instead of http</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to 1.3.12:
  * Added function mpz_lprime_prefix() for k-prefix tweak
  * Improved strength of oracle hash function g() by second algo
  * Raised the requirement of libgcrypt version to &gt;= 1.7.0
  * Improved on RFC4880 handling
  * mpz_shash: bugfix changes the output of hash function g()</changelog>
  <changelog author="kbabioch@suse.com" date="1529928000">- Update to 1.3.13
  - Lots of major improvements for undocumented OpenPGP interface
  - PRNG from Botan is used as additional source of randomness
  - SHA3 is emulated if runtime version of libgcrypt is too old
- Applied spec-cleaner</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530014400">- Fix install-info usage.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536580800">- Update to version 1.3.14
    With this release three additional parameters for the control of secure
    memory allocation have been added to init_libTMCG(). They are explained
    in the reference manual. Moreover, the OpenPGP interface has been
    enhanced in several way, e.g., ECDH, ECDSA and EdDSA are supported now.
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.3.15
    This is a maintenance release that fixes some bugs, e.g. in the Botan
    support of functions from module mpz_srandom. Moreover, some interfaces
    of the OpenPGP implemenation have been added and removed. For some
    modules of LibTMCG a basic exception handling has been introduced.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1543838400">- Update to version 1.3.16
  * changed constant TMCG_MAX_CARDS (decreased by factor 2)
  * changed formulas for TMCG_MAX_VALUE_CHARS and TMCG_MAX_KEY_CHARS
  * RFC4880: added support of Preferred AEAD Algorithms [RFC 4880bis]
  * RFC4880: added output for key usage "timestamping" [RFC 4880bis]
  * RFC4880: changed tmcg_openpgp_byte_t: unsigned char -&gt; uint8_t
  * RFC4880: added PacketAeadEncode() [RFC 4880bis]
  * RFC4880: added SymmetricDecryptAEAD() and SymmetricEncryptAEAD()
  * changed formula for TMCG_MAX_KEYBITS (increased by factor 2)
  * mpz_srandom: bugfix in Botan code branch of mpz_grandomb()</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1548244800">- Update to version 1.3.17
  * VTMF,ASTC,DKG,VRHE,EOTP,COM,VSS: make CheckGroup() more robust
  * VSSHE: security bugfix for Verify_[non]interactive_[_publiccoin]
  * mpz_spowm: added check for correct base in fast exponentiation
  * mpz_sqrtm: remove unused parameter in tmcg_mpz_qrmn_p()
  * configure.ac: added compiler option "-Wextra"
  * mpz_sprime: added tmcg_mpz_smprime() with increased B = 80000
  * RFC4880: changed type of tmcg_openpgp_mem_alloc to unsigned long</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.3.18
  * This release is two-fold: first, it fixes some bugs (e.g. iterated S2K)
    of the OpenPGP interface, and second, it adds functionality for handling
    v5 keys and signatures (see RFC 4880bis-07).
- Re-freshed keyring file with current version from upstream</changelog>
</package>
<package pkgid="188ba74ba71198c8c75ec6f83248a965a65eab222bb0658817e3d3efade159a7" name="libUsageEnvironment3" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="26f670f053a25bd0e571966f8473194496e2b083f544dab2bd8cd4ec35d4f0d2" name="libXvMC_nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b0c585c1c87dd2f271147662979a5a37ccfed00db10d3bcf2241f3bff3c78508" name="libXvMC_nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="06f1938b5db8b01fdae6b7e99607cd91ad58d20969a10bb764844b6ab599c558" name="libXvMC_nouveau" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="2ffea1e915cb92ab78f8dbf65839a18b417aded498358312f93010ff01ba5300" name="libXvMC_nouveau" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="655f77978a482aec506d4cb6857425c41d49e11dcfb09d220a3f1f44f88210f6" name="libXvMC_nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="26c33b43326d9700641ea0257946f109a8d48abc40810cc48531dd5108f43fbf" name="libXvMC_nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="e0d366bc70486e8ffa69bb3c41b0f8aead5657b37cb83871f536cbf2881bbc7b" name="libXvMC_r600" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="86e5083956d4bfe69a2d08832203736c6f63b575c9e7d8c8f32f199bfb2e47ea" name="libXvMC_r600" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="62d182137b7348567cee8c4a908bac4a15f9825fa6f81ffe30dd41bbbcb79853" name="libXvMC_r600" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ad11d9d6a1dc9b545ff874b66d89fa59f734aa8c9c23a8400dcbcc6ee7c2f5d9" name="libXvMC_r600" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="b553f33f8d1ee52bba18613f2c9786ff5f62579a6cc34309d9f4b0b8e4ed6855" name="libXvMC_r600-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e2acb8b8a57612f90d3b2a080bf6983aec71b45a9527b65a4b03b20f9abcc43e" name="libXvMC_r600-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="0dc5cb5f464c5eb2b7530f7eeb3f5b3b7ab4c2d29cc16df86eb916067cfcd731" name="libaccountsservice0" arch="i586">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="b5b45ed2ccc504cd249a219f0b2e45571bd035ac894472fce2b6216bf1d0f9ce" name="libaccountsservice0" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp151.6.3.1"/>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="xwang@suse.com" date="1557316800">- Update accountsservice-read-root-user-cache.patch: amended by
  upstream developers and merged as commit d8b77951
  (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568203200">- Add accountsservice-wtmp-io-improvements.patch: Backports that
  improve wtmp io performance (boo#1139487).</changelog>
</package>
<package pkgid="f42b685548154293333e6ef84c981e2eda082ac1cfe90a8bfad777ad9ac13ced" name="libada7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="03ea16f309ce1b9fa00a10052746ec99c6cb1c74ef5048c9704803cb4abd6e74" name="libada7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ac31e6d0d91438b293309b39f0070f1b0d342f1258fbf19c9c2b99956cab6dd2" name="libada7" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="92e30f5cfbdff35fa715b58bd94c6c76183f59bbada3bac82640f01b4c6ba25e" name="libada7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="64a079583f050542ed14ab697fdb2a150d9c176ef634afa62c90b34f3838b88e" name="libada7" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="2b159cc5883c159391f4b1e75a5ee0748f3fa1f48126fa90b258fa8333774fc7" name="libada7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="0c89711feb93fcfb5c5ffe21b2f41e29bed8014df21958015df583aa5c04a2cd" name="libapparmor" arch="src">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="f2c26611cf807bbcfaecb3651bf8c88bdb48a9d0b67a9056c85cf49551a727f5" name="libapparmor-devel" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="247104fe545a1fbc6af9c98c9e4a32a5ad3531931a5db9ce528a0413f5e36464" name="libapparmor-devel" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="9fab944f324701e10ca7771a5bc875f622989457fe79d5d0ff5d518bb0dedb19" name="libapparmor1" arch="i586">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="74ffc97c2bfc9ebb93152e7f8f720b9bcdcbb6dc1dfa71b72ace56f4c6f19b88" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="4ddb8b4266b68c5fe9b0b27a00234ba55da788c4b6e80e397266c456eb01f6d3" name="libapparmor1-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp151.4.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)
- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
  with minimum BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - mostly test-related changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - fix: remove empty LD_RUN_PATH from libapparmor-perl
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - fix build with swig 4.0 (boo#1135751)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog</changelog>
</package>
<package pkgid="202699bca551f21bf2fa0232d7faf8c07fafadadf0730a47f18328562d650fac" name="libarchive" arch="src">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="4dcb0744380b7379f657dfa958cf45cd7cfd2b01d4bef80a487c96798a4874d2" name="libarchive-devel" arch="i586">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="87016ebb977b2704c6e98fd869dfab0d2e34dcde2f62723dd5d24671a00e29b5" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="375c92c280c40a07651f304c1a585684056face7671d2d940af000d4ce65b485" name="libarchive13" arch="i586">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="4eed8daff5b1bd90dce4489dafd28374faaf6b2b888f48ea768292365665177e" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="e19eea5a5a2d73509bb31f65630b88cd7e30925d3bcdf22d64ca6cd7f5687321" name="libarchive13-32bit" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp151.5.3.1"/>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1572004800">- Added patch:
  * CVE-2019-18408.patch Fixes use-after-free in a certain ARCHIVE_FAILED situation (bsc#1155079)</changelog>
</package>
<package pkgid="e91da68f7c7311f9c416ba99cdd595e93be91cfef630dae9e1199c9a930ec067" name="libasan4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="9efa27b34d697f72ec27fd52a4da10ed64751721ee4fd64d908c41548c8d7aec" name="libasan4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="6165a34888fef633e2f7b3b590b037a6c06b9cb6a62a2040f74d0421e16f3888" name="libasan4" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="4349372ab8c937b1c3f0792963a8ccc03237c9e9eb39f268a7ac4c0b59b9d170" name="libasan4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="f1fa18265bfadcc8f1e7104041d8af2afc89bac11bf4735851fd9d33bbd3602c" name="libasan4" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="cd7ab38c85e159e7bdc4e8c152c71efb23482ff7bb17312867da143eae2529c7" name="libasan4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e98e628433a19fa7313eb49808e1b431ef245cdd7625b923cea2178f4b516087" name="libasm-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8bbeb4327142b18ac6880b220f40fa96a1d623886bec2b9b215b630e42c25c2e" name="libasm-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="893a9938d6a9ae48d907f328fc792eb8a210a7710c721ac58859766038a2239f" name="libasm1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8716c035b094d74f11fe0866f66cc3e94acb6db6e47698ad93e25c481b7fad43" name="libasm1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="381171152f0e8d69780a8d6bd9a31b43704ce514ea10c8f8b40100f9fc2f3ef8" name="libasm1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="85beb3d65893a9a7153e76c5cebf307d9905ed258abd12f294c2aac8f5439f13" name="libaubio-devel" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="0a421d3c226860ae904d9682dbdbc8ed074267c5a68d4b352be6ab2ef3c7d399" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="9a0a13639523bfb4333b11310ffd2e299cf8984717b376948c6fdf12d8b47382" name="libaubio5" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="485811351009338fa8e8889c687870e2027be4ec7de9d178079d62601ce326a9" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="ef956959c005a7e330e960c405ed52de3fa0558515fa9f28d14c40548c646bc9" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="1956102f4a3bdc77683f0e384fa2c3b8421cb810bed0f9cf9fe0736bf146612c" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ed92cb749287883c60a0fdcd1a809ba444b90d1798f8e2312a931489e767e130" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="0c411f8ef708fb28fb7aed9ee0d13c7899cb97494ada7de31bbd686afc20dfac" name="libbind9-160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="bd005135a5101d59a2e41b16b6ea89e70eab23e231535f0ca3378bea4ad02840" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="872058edc9e6be30cf665321bd9e2757d67c53616f45b00fcaf23639433b37d1" name="libbind9-160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="cacb958650cbc7d9ca819ae19109735a0c9d52a38a5af994c3a86a17cca190ef" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="8adce8e330bb4e4c5429e66d7e57129758cabebb2216f38372442df23f2d36ff" name="libblkid-devel" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="3069cd60e736924c77b7a7359d177a44f6edd2553481c4f9477b518a3a215c19" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="7e1567211d3cfaa90b2ca62042f38d40970d7bfa73209c2f055eea0ede4c066d" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="3d6ce9dc3f9414d4e8bebe7ab89b1919b1e72ce355a3f473567ad89b6509e45a" name="libblkid-devel-static" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="93b88f828dde4e665526107b4d37f12d920e5e6af85bee137dfd31d73785d10d" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="7c9a780bc2cf8bb67b3fa5eb2a0ffad0dc29c7ca85d60e233996ad198e5cfb6b" name="libblkid1" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="49b5c80f899438f7c6a85ffa5eacaae0d85624b6723f313cf0259730789a026c" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="3e4ff40033dbdd74a6f2c244f51ce9c1f7560b9c93a430d87bafe87e1f2d713f" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="8be9e9fca07fce9d6903f7befe2ded5ccb1eb5ced4e4c2f74c1651657b84ae97" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="b1a96aced1bba7b1f4c3fd22375ca51c6d0a68d2a914aa311ab3842c3893a221" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="3d839e0f27cc59f4dd9208d072a451f7220f3893e9aff2dec0c6b11dc73decd3" name="libbluetooth3" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="5c88f12a473da0d929629f645d651dedce2ae1048b7ff6faaad9a1940cd78e40" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="d90ff25bebb4f5931d98b9491c35a2a15240da8b1cd614c1193256c0f5683942" name="libbluetooth3" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="707ce987e3411466824689dc22c50b84059e625c66970d0ee0145dd037fe5981" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.6.1"/>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
</package>
<package pkgid="59e0cd59f6a2c845a450daebb620ceca31d5db4e3d554137d8c21164c2669be5" name="libbrlapi0_6" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel by specific individual pkgconfig()
  buildrequires.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashisms in brltty-install script
- add patches:
  * brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 5.2
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.3
- Remove obsolete patches;
  + brltty-python-prefix.patch
  + brltty-5.1-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1419336000">- Add a dependency to python3 for building; brltty fails in his staging
  project because of mssing python3-xml module</changelog>
  <changelog author="mgorse@suse.com" date="1423569600">- Modify systemd service file to correct brltty path (boo#917176).</changelog>
  <changelog author="mgorse@suse.com" date="1465300800">- Update to version 5.3.1 (fate#320893).
  + Too many changes; please read ChangeLog :
    usr/share/doc/packages/brltty/ChangeLog
- API version is now 0.6.4
- Require systemd to build
- Install brltty-atb, brltty-ktb, and brltty-tune (new binaries)
- Add b40-1.patch - fix for invalid packets from a Brailliant
- Add brltty-polkit.patch: support polkit-based authentication for brlapi.
  Install policy file
  Set polkit as default brlapi authentication mechanism
- Install udev rules</changelog>
  <changelog author="jengelh@inai.de" date="1466424000">- Add missing service_add_pre call. Add missing argument to fdupes.
- Fix misplacement of /69-brltty.rules in the root directory
  because pkgconfig(udev) was not requested, which led to _udevdir
  being the empty string.</changelog>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
</package>
<package pkgid="100ea759165be15461846721fa906dd1db6771b6760972aef042121f4226b1fe" name="libbz2-1" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="073692a8a1c5c018b130fa2d624ffe83c935e9940d08041dd9c449e3c563dc8c" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="01db11ad15b6130a99d3e9d967e0db8d633c2cd7ba334cf8a2940b5c0fb0e598" name="libbz2-1" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="e7e8f5b4c791cad19b1ed8359d671ccd45c0ed12848d9a69a399f32ef933bc72" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="6fd60a03acd5fdf10ae73a81dcd4bc78c4d9904b466dab43af5af405ef6b0629" name="libbz2-1" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="ecad286b9665c89410a417db5d8df4d91f8ba552968919302926672d9dfb9a61" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="05e583d4d2282cf3eaf01b00c44c560d99b614735f14d3848f70b05e541e8ad0" name="libbz2-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="ad1110cd8bbdf259bf19c192058b96c010bc74747c7d15b44eb455b953d61b4c" name="libbz2-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="825f55cc97fed768412d170eaa7028b21bfc830b92808da038778decf44d52e1" name="libbz2-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="6538ec9977fb69dc984d525d702abf64d19e0ff0db56751f15826ef79f9ea145" name="libbz2-devel" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="731eef0845e6a7c8bff45f2ce43f8daccba2520ea3e6a201c364b668e59caff5" name="libbz2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="c5dc09693cc0c2efae0b42badf08a2275ac26f18945d4687c9d0272f76986a5d" name="libbz2-devel" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="dbf122debf5acef3f519d7318a156b7e5dc2c6c9ad94d10b37fa748b8b32f373" name="libbz2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="912bc11134ff080d369fc94b01338e94c72cb5ebb066f78c23b2cf350c553346" name="libbz2-devel" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="28e3bcb66f7a7fc3bce02802e86cf189ecbbc17aa3dfa59c5c1ad716a6b85458" name="libbz2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="8c38deb4aaa6f4207345e808579bd81c9a35a192a59d05a4add1a6fb16cd6103" name="libbz2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="3683c2a3aeb09f6de2209a32740c0ec0e83684df0b351d53ebebc47820b7f13e" name="libbz2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="6b2bb98fad9d10d18e5408f2d0a4169b0618f7980f4794d5a84eb04f688035c7" name="libbz2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="65ac9a4514b6d4698417285cf72f0fb2cb6e218675092d4ffc9deb882fba2a18" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="fe1e1b7c082b40ee136387c256194de90dc12d18b9101d44ce728c7b1503aaa7" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="0e19dc145fe401fde90ff314f293b6aa9ae49aca361885cd0d482ac06e5fd86f" name="libc++1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="fab2128f614f4035d07a6bb5a7e21e74d09e09af1c0ccedb718ba8810500691f" name="libc++1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="c45e07761f582bb6b86a3ce70f6766aa266bd687c2646b796e791511352846aa" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="1a36e33be6cef24382887145426296160db3a6956b35a94fdf59e1edd9f11525" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="dd6cb9e326a095ffbbbb4907ec8a9a5c213bcb667d75a9f80d5df77da3427e3e" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="c93c16806f7a28b9b4ed7e662c1f01e477f29e8d8df2a0e7487cffda4a168304" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="b3a9afd8e64222f31a2fd82d740a6690b70d39fca52f5fe1ff41ca9cbcf2289f" name="libc-client2007e_suse" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="lp151.4.3.1"/>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1145195])</changelog>
</package>
<package pkgid="12b4edf5f73f0857f26024a63db7943019e072de086e09219d1a24de4f673df5" name="libcdio++0" arch="i586">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="093a97a3578d54807d3ba54710f6576ae6043ee470459cb091b6319c9ac61f2e" name="libcdio++0" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="565747f1f5d82d184dce4be050b53903c3456baa92fc60a827a7cb515fcd559c" name="libcdio++0-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="b590b6bb4a06ec0c884ab0bfc5c255d30bfa8b2211953ba6fe446acb1583514a" name="libcdio" arch="src">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="dacbf0ac723d2d118b8f8f5d903da976d31d4af9c5d524428fc18408a50e1f8a" name="libcdio-devel" arch="i586">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="6e5e6f8c1b91b2bb7962f74feaaab3e652fb445754150aa3a93b2429a3e022b5" name="libcdio-devel" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="2fd1a83fe7f6d092cec2610dc6a622cf0d3fbf1db08ccf27738465e0c77576d0" name="libcdio16" arch="i586">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="4cc462c8b069c4ebf599199e6c2733ddcefdbd40cc14461a010c9f6018177762" name="libcdio16" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="a94f9e18467ca6704d94b51bf5847c95442fbb29a5d2677b23edc211343ab37a" name="libcdio16-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="fcb88b49f805101d5bb2fb4d36b7b6acc5bcde01e8249e9aa7a495c8ede1864e" name="libcilkrts5-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="10f7c6777d2af7b8f6ef5e6ea64ac37c5f1d6773cc3c794ae825f2d9359034be" name="libcilkrts5-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="298cef596b13cfe913099c7a513acdc92b44112016ba85644c2a84baaf2ad750" name="libcilkrts5" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="a39740fc3ada681ebaeda03f2f9c463531d42558ea55b2be0fdd0e1b171e6984" name="libcilkrts5" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="d10e413da13db46e4d3c1d4ce43b036b22517b77c2e63014e9802f40e3fa27ad" name="libcilkrts5" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="9a4fc267d7bf2c411acf4fca572a03b8ee58949eebe41ca4071401c4efd5323a" name="libcilkrts5" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="5af8641a5c93d4ae05f0279cb309e458377a34e88d265a4759d2f21e3f1cc8b9" name="libclamav7" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="587f10f6504599dd045f564144687ef1315403dbd8d7a1b416dfb302d34e0d54" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- CVE-2019-12625, bsc#1144504, backported from version 0.101.4:
  * clamav-zipbomb.patch: Add detection and heuristic alert for
    zips with overlapping files.
  * clamav-max-scantime.patch: Add --max-scantime clamscan option
    and MaxScanTime clamd config option.
- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1574164800">- CVE-2019-12900, bsc#1149458, clamav-CVE-2019-12900.patch:
  BZ2_decompress out-of-bounds write when there are many selectors</changelog>
</package>
<package pkgid="728d1b519a4f1469f5310157d93e4af41641baa472d36b1be9ee328bc5188a1f" name="libclang7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e342967d3a57ba44a417fe1053de9e04ebc3a4926efb38db1fe9ed7e576a54a9" name="libclang7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="2a4a5428c209728ae9b367c61c3074affab0fa3afb8b9d52f01fb14608a5e930" name="libclang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="94c681b51d4bf3bda1a904c848e12f1e69570e6864e0ff80c8badf13a7c30362" name="libclang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ca994f684a9ee6bc532352c2a1a425fde3a68690232d432e11e4cc955ff05bee" name="libclang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="576ff213e011863c3472db014ca55e5f602873299aaf3930626b496b0e7204b5" name="libclang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="274337df2668f1bfbab0321eac4b6cbf919d51d9da85c98d30bd1a199ab136ef" name="libcom_err-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="ea498abcb2462935a2df6e4eb04d62cca236a6334c729a67abf5b5cdd16df28f" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="2d8fadd4d296fb3238f3b7c2a0a518f601467e4b27889075bfbcb6fe2d1c5bb9" name="libcom_err-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="b40fc27067c9befbfaadacb73f72914ee59a695f65b535c4f7984e1297e2ea29" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="612f1fa45fde97e5fe57ddaafec0245bf58483875444e77108adeacaa7853388" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="f7801a014a0c6270329e863f502c8a022d5fa3dc2b4799eeb3e8b8c1272c1967" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="471382f5e87906b2affadd56cb6f0f3d619e1786fb667506e7f4c7634dd04eb0" name="libcom_err-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0b9a1ed1511fd3ae32b379b9059ecef50c4af7ab0d4ad63fdf997b05e761c21a" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="e848421c9a6e0c7cf531e95103e286f9005ffe06ddcabd0da4c9e9442b1304c9" name="libcom_err-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="4609de81f04f1de8b196af31029d9b0436c026c90b2eb287d66aa08fa5c86668" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="6b0f155f2d0d1f98c9bfbc111ddd409943002bffddf72cd3668e4913fcc00671" name="libcom_err2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="a3af4a29834fc54e6a16fcb420dfdd405ccdd2cfac82f2df283ee0f6ab112604" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="7155b05fee0ff8b8e0a4b2a3510e2c7cb8b586f33b55403283f1b67aa64e34a3" name="libcom_err2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="333fdc7b98e421534a3a17efc81dd08e22febef57d517d7f214a51695d9b2f95" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="4fd1b13f409b4c9402a114671429becc2763be1f18546cf1abdb03b1cb289de4" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="1244c76eaec5cbd5f150e11b3547e351a8318dda87756d417bbf04c4be6e3ed8" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="3ee2b02c76ab7d5958b8d8143e9453301bfb9ac92fd0d75596fd6da1b01647d2" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20190401" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520251200">- Configuration files should generally be tagged as %config(noreplace) in order
  to keep the modified config files and to avoid losing data when the package
  is being updated.
  feature#crio</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Added /usr/share/containers/oci/hooks.d and /etc/containers/oci/hooks.d
  to the package. These are used by tools like cri-o and podman to store
  custom hooks.</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Make libcontainers-common arch independent.
- Add LICENSE.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371200">- Consolidate libcontainers-{common,image,storage} into one package,
  libcontainers-common. That's the way upstream intended all libraries from
  github.com/containers to be packaged. It facilitates updating and maintaining
  the package, as all configs and manpages come from a central source.
  Note that the `storage` binary that previously has been provided by the
  libcontainers-storage package is not provided anymore as, despite the claims
  in the manpages, it is not intended for production use.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371201">- storage.conf: comment out options that are not supported by btrfs.
  This simplifies switching the driver as it avoids the whack-a-mole
  of commenting out "unsupported" options.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024000">- Use seccomp.json from github.com/containers/libpod to align with the
  upstream defaults.
- Update to the latest image and storage to pull in improvements to the
  manpages.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024001">- Add oci-hooks(5) manpage from libpod.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1544011200">- Use seccomp.json from github.com/containers/libpod, instead of
  installing the tar.xz on users systems (boo#1118444)</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1544184000">- Update to latest libpod and storage to support cri-o 1.13</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1546776000">- storage.conf - restore btrfs as the default driver</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1546948800">- Upgrade to libpod v0.12.1.2 and storage v1.4
  * No significant functional or packaging changes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547380800">- Upgrade to libpod v1.0.0
  * Fixed a bug where storage.conf was sometimes ignored for rootless containers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Upgrade to storage v1.6
  * Remove private mount from zfs driver
  * Update zfs driver to be closer to moby driver
  * Use mount options when mounting the chown layer.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1548417600">- Upgrade to storage v1.8
  * Check for the OS when setting btrfs/libdm/ostree tags
- Upgrade to image v1.3
  * vendor: use github.com/klauspost/pgzip instead of compress/gzip
  * vendor latest ostree
- Refactor specfile to use versioned tarballs
- Established package versioning scheme (ISODATE of change)
- Remove non-upstream storage.conf
- Set btrfs as default driver if /var/lib is on btrfs [boo#1123119]
- Version 20190125</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1549108800">- Restore non-upstream storage.conf, needed by CRI-O</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1550577600">- Upgrade to storage v1.10
  * enable parallel blob reads
  * Teach images to hold multiple manifests
  * Move structs for storage.conf to pkg/config
- Upgrade to libpod v1.0.1
  * Do not unmarshal into c.config.Spec
  * spec: add nosuid,noexec,nodev to ro bind mount</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551268800">- Update to libpod v1.1.0
  * Rootless Podman can now forward ports into containers (using the same -p and -P flags as root Podman)
  * Rootless Podman will now pull some configuration options (for example, OCI runtime path) from the default root libpod.conf if they are not explicitly set in the user's own libpod.conf</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1554120000">- Update to libpod v1.2.0
  * Rootless Podman can now be used with a single UID and GID, without requiring a full 65536 UIDs/GIDs to be allocated in /etc/subuid and /etc/subgid
  * Move pkg/util default storage functions from libpod to containers/storage
- Update to image v1.5
  * Minor behind the scene bugfixes, no user facing changes
- Update to storage v1.12.1
  * Move pkg/util default storage functions from libpod to containers/storage
  * containers/storage no longer depends on containers/image
- Version 20190401</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1559649600">- Add util-linux and grep as Requires(post) to ensure btrfs config gets made correctly</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560254400">- Update to libpod v1.4.0 (bsc#1137860):
  - The podman checkpoint and podman restore commands can now be
    used to migrate containers between Podman installations on
    different systems
  - The podman cp command now supports a pause flag to pause
    containers while copying into them
  - The remote client now supports a configuration file for
    pre-configuring connections to remote Podman installations
  - Fixed CVE-2019-10152 - The podman cp command improperly
    dereferenced symlinks in host context
  - Fixed a bug where podman commit could improperly set
    environment variables that contained = characters
  - Fixed a bug where rootless Podman would sometimes fail to start
    containers with forwarded ports
  - Fixed a bug where podman version on the remote client could
    segfault
  - Fixed a bug where podman container runlabel would use
    /proc/self/exe instead of the path of the Podman command when
    printing the command being executed
  - Fixed a bug where filtering images by label did not work
  - Fixed a bug where specifying a bing mount or tmpfs mount over
    an image volume would cause a container to be unable to start
  - Fixed a bug where podman generate kube did not work with
    containers with named volumes
  - Fixed a bug where rootless Podman would receive permission
    denied errors accessing conmon.pid
  - Fixed a bug where podman cp with a folder specified as target
    would replace the folder, as opposed to copying into it
  - Fixed a bug where rootless Podman commands could double-unlock
    a lock, causing a crash
  - Fixed a bug where Podman incorrectly set tmpcopyup on /dev/
    mounts, causing errors when using the Kata containers runtime
  - Fixed a bug where podman exec would fail on older kernels
  - The podman commit command is now usable with the Podman remote
    client
  - The --signature-policy flag (used with several image-related
    commands) has been deprecated
  - The podman unshare command now defines two environment
    variables in the spawned shell: CONTAINERS_RUNROOT and
    CONTAINERS_GRAPHROOT, pointing to temporary and permanent
    storage for rootless containers
  - Updated vendored containers/storage and containers/image
    libraries with numerous bugfixes
  - Updated vendored Buildah to v1.8.3
  - Podman now requires Conmon v0.2.0
  - The podman cp command is now aliased as podman container cp
  - Rootless Podman will now default init_path using root Podman's
    configuration files (/etc/containers/libpod.conf and
    /usr/share/containers/libpod.conf) if not overridden in the
    rootless configuration
- Update to image v1.5.1
  - Vendor in latest containers/storage
  - docker/docker_client: Drop redundant Domain(ref.ref) call
  - pkg/blobinfocache: Split implementations into subpackages
  - copy: progress bar: show messages on completion
  - docs: rename manpages to *.5.command
  - add container-certs.d.md manpage
  - pkg/docker/config: Bring auth tests from
    docker/docker_client_test
  - Don't allocate a sync.Mutex separately
- Update to storage v1.12.10
  - Add function to parse out mount options from graphdriver
  - Merge the disparate parts of all of the Unix-like lockfiles
  - Fix unix-but-not-Linux compilation
  - Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set
  - Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes
  - lockfile: add RecursiveLock() API
  - Update generated files
  - Fix crash on tesing of aufs code
  - Let consumers know when Layers and Images came from read-only stores
  - chown: do not change owner for the mountpoint
  - locks: correctly mark updates to the layers list
  - CreateContainer: don't worry about mapping layers unless necessary
  - docs: fix manpage for containers-storage.conf
  - docs: sort configuration options alphabetically
  - docs: document OSTree file deduplication
  - Add missing options to man page for containers-storage
  - overlay: use the layer idmapping if present
  - vfs: prefer layer custom idmappings
  - layers: propagate down the idmapping settings
  - Recreate symlink when not found
  - docs: fix manpage for configuration file
  - docs: add special handling for manpages in sect 5
  - overlay: fix single-lower test
  - Recreate symlink when not found
  - overlay: propagate errors from mountProgram
  - utils: root in a userns uses global conf file
  - Fix handling of additional stores
  - Correctly check permissions on rootless directory
  - Fix possible integer overflow on 32bit builds
  - Evaluate device path for lvm
  - lockfile test: make concurrent RW test determinisitc
  - lockfile test: make concurrent read tests deterministic
  - drivers.DirCopy: fix filemode detection
  - storage: move the logic to detect rootless into utils.go
  - Don't set (struct flock).l_pid
  - Improve documentation of getLockfile
  - Rename getLockFile to createLockerForPath, and document it
  - Add FILES section to containers-storage.5 man page
  - add digest locks
  - drivers/copy: add a non-cgo fallback
- Add default SLES mounts for container-suseconnect usage</changelog>
</package>
<package pkgid="ad7718c8802310a429e9d71cbbdf5227e95d160f914b53300bec6ad1ad837729" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20190401" rel="lp151.2.3.1"/>
  <changelog author="vrothberg@suse.com" date="1520251200">- Configuration files should generally be tagged as %config(noreplace) in order
  to keep the modified config files and to avoid losing data when the package
  is being updated.
  feature#crio</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Added /usr/share/containers/oci/hooks.d and /etc/containers/oci/hooks.d
  to the package. These are used by tools like cri-o and podman to store
  custom hooks.</changelog>
  <changelog author="vrothberg@suse.com" date="1534161600">- Make libcontainers-common arch independent.
- Add LICENSE.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371200">- Consolidate libcontainers-{common,image,storage} into one package,
  libcontainers-common. That's the way upstream intended all libraries from
  github.com/containers to be packaged. It facilitates updating and maintaining
  the package, as all configs and manpages come from a central source.
  Note that the `storage` binary that previously has been provided by the
  libcontainers-storage package is not provided anymore as, despite the claims
  in the manpages, it is not intended for production use.</changelog>
  <changelog author="vrothberg@suse.com" date="1535371201">- storage.conf: comment out options that are not supported by btrfs.
  This simplifies switching the driver as it avoids the whack-a-mole
  of commenting out "unsupported" options.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024000">- Use seccomp.json from github.com/containers/libpod to align with the
  upstream defaults.
- Update to the latest image and storage to pull in improvements to the
  manpages.</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1542024001">- Add oci-hooks(5) manpage from libpod.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1544011200">- Use seccomp.json from github.com/containers/libpod, instead of
  installing the tar.xz on users systems (boo#1118444)</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1544184000">- Update to latest libpod and storage to support cri-o 1.13</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1546776000">- storage.conf - restore btrfs as the default driver</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1546948800">- Upgrade to libpod v0.12.1.2 and storage v1.4
  * No significant functional or packaging changes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547380800">- Upgrade to libpod v1.0.0
  * Fixed a bug where storage.conf was sometimes ignored for rootless containers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1547726400">- Upgrade to storage v1.6
  * Remove private mount from zfs driver
  * Update zfs driver to be closer to moby driver
  * Use mount options when mounting the chown layer.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1548417600">- Upgrade to storage v1.8
  * Check for the OS when setting btrfs/libdm/ostree tags
- Upgrade to image v1.3
  * vendor: use github.com/klauspost/pgzip instead of compress/gzip
  * vendor latest ostree
- Refactor specfile to use versioned tarballs
- Established package versioning scheme (ISODATE of change)
- Remove non-upstream storage.conf
- Set btrfs as default driver if /var/lib is on btrfs [boo#1123119]
- Version 20190125</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1549108800">- Restore non-upstream storage.conf, needed by CRI-O</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1550577600">- Upgrade to storage v1.10
  * enable parallel blob reads
  * Teach images to hold multiple manifests
  * Move structs for storage.conf to pkg/config
- Upgrade to libpod v1.0.1
  * Do not unmarshal into c.config.Spec
  * spec: add nosuid,noexec,nodev to ro bind mount</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1551268800">- Update to libpod v1.1.0
  * Rootless Podman can now forward ports into containers (using the same -p and -P flags as root Podman)
  * Rootless Podman will now pull some configuration options (for example, OCI runtime path) from the default root libpod.conf if they are not explicitly set in the user's own libpod.conf</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1554120000">- Update to libpod v1.2.0
  * Rootless Podman can now be used with a single UID and GID, without requiring a full 65536 UIDs/GIDs to be allocated in /etc/subuid and /etc/subgid
  * Move pkg/util default storage functions from libpod to containers/storage
- Update to image v1.5
  * Minor behind the scene bugfixes, no user facing changes
- Update to storage v1.12.1
  * Move pkg/util default storage functions from libpod to containers/storage
  * containers/storage no longer depends on containers/image
- Version 20190401</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1559649600">- Add util-linux and grep as Requires(post) to ensure btrfs config gets made correctly</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560254400">- Update to libpod v1.4.0 (bsc#1137860):
  - The podman checkpoint and podman restore commands can now be
    used to migrate containers between Podman installations on
    different systems
  - The podman cp command now supports a pause flag to pause
    containers while copying into them
  - The remote client now supports a configuration file for
    pre-configuring connections to remote Podman installations
  - Fixed CVE-2019-10152 - The podman cp command improperly
    dereferenced symlinks in host context
  - Fixed a bug where podman commit could improperly set
    environment variables that contained = characters
  - Fixed a bug where rootless Podman would sometimes fail to start
    containers with forwarded ports
  - Fixed a bug where podman version on the remote client could
    segfault
  - Fixed a bug where podman container runlabel would use
    /proc/self/exe instead of the path of the Podman command when
    printing the command being executed
  - Fixed a bug where filtering images by label did not work
  - Fixed a bug where specifying a bing mount or tmpfs mount over
    an image volume would cause a container to be unable to start
  - Fixed a bug where podman generate kube did not work with
    containers with named volumes
  - Fixed a bug where rootless Podman would receive permission
    denied errors accessing conmon.pid
  - Fixed a bug where podman cp with a folder specified as target
    would replace the folder, as opposed to copying into it
  - Fixed a bug where rootless Podman commands could double-unlock
    a lock, causing a crash
  - Fixed a bug where Podman incorrectly set tmpcopyup on /dev/
    mounts, causing errors when using the Kata containers runtime
  - Fixed a bug where podman exec would fail on older kernels
  - The podman commit command is now usable with the Podman remote
    client
  - The --signature-policy flag (used with several image-related
    commands) has been deprecated
  - The podman unshare command now defines two environment
    variables in the spawned shell: CONTAINERS_RUNROOT and
    CONTAINERS_GRAPHROOT, pointing to temporary and permanent
    storage for rootless containers
  - Updated vendored containers/storage and containers/image
    libraries with numerous bugfixes
  - Updated vendored Buildah to v1.8.3
  - Podman now requires Conmon v0.2.0
  - The podman cp command is now aliased as podman container cp
  - Rootless Podman will now default init_path using root Podman's
    configuration files (/etc/containers/libpod.conf and
    /usr/share/containers/libpod.conf) if not overridden in the
    rootless configuration
- Update to image v1.5.1
  - Vendor in latest containers/storage
  - docker/docker_client: Drop redundant Domain(ref.ref) call
  - pkg/blobinfocache: Split implementations into subpackages
  - copy: progress bar: show messages on completion
  - docs: rename manpages to *.5.command
  - add container-certs.d.md manpage
  - pkg/docker/config: Bring auth tests from
    docker/docker_client_test
  - Don't allocate a sync.Mutex separately
- Update to storage v1.12.10
  - Add function to parse out mount options from graphdriver
  - Merge the disparate parts of all of the Unix-like lockfiles
  - Fix unix-but-not-Linux compilation
  - Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set
  - Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes
  - lockfile: add RecursiveLock() API
  - Update generated files
  - Fix crash on tesing of aufs code
  - Let consumers know when Layers and Images came from read-only stores
  - chown: do not change owner for the mountpoint
  - locks: correctly mark updates to the layers list
  - CreateContainer: don't worry about mapping layers unless necessary
  - docs: fix manpage for containers-storage.conf
  - docs: sort configuration options alphabetically
  - docs: document OSTree file deduplication
  - Add missing options to man page for containers-storage
  - overlay: use the layer idmapping if present
  - vfs: prefer layer custom idmappings
  - layers: propagate down the idmapping settings
  - Recreate symlink when not found
  - docs: fix manpage for configuration file
  - docs: add special handling for manpages in sect 5
  - overlay: fix single-lower test
  - Recreate symlink when not found
  - overlay: propagate errors from mountProgram
  - utils: root in a userns uses global conf file
  - Fix handling of additional stores
  - Correctly check permissions on rootless directory
  - Fix possible integer overflow on 32bit builds
  - Evaluate device path for lvm
  - lockfile test: make concurrent RW test determinisitc
  - lockfile test: make concurrent read tests deterministic
  - drivers.DirCopy: fix filemode detection
  - storage: move the logic to detect rootless into utils.go
  - Don't set (struct flock).l_pid
  - Improve documentation of getLockfile
  - Rename getLockFile to createLockerForPath, and document it
  - Add FILES section to containers-storage.5 man page
  - add digest locks
  - drivers/copy: add a non-cgo fallback
- Add default SLES mounts for container-suseconnect usage</changelog>
</package>
<package pkgid="195c1693e07e86406a7f119bd0f09b898f88e22e652b8ff2374fa248b0ba8595" name="libcryptopp" arch="src">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1318593600">- Added pkg-config file from fedora project
- Cleaned up spec file formatting</changelog>
  <changelog author="jengelh@medozas.de" date="1318852800">- Remove bogus Conflict against libcrypto++0 (cf. shlib guidelines)</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Proper shared library versioning</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add libcryptopp-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="adam@mizerski.pl" date="1350216000">- added baselibs.conf
- spec file improved</changelog>
  <changelog author="adam@mizerski.pl" date="1362139200">- update to 5.6.2
  - changed license to Boost Software License 1.0
  - added SHA-3 (Keccak)
  - updated DSA to FIPS 186-3 (see DSA2 class)
  - fixed Blowfish minimum keylength to be 4 bytes (32 bits)
  - fixed Salsa validation failure when compiling with GCC 4.6
  - fixed infinite recursion when on x64, assembly disabled, and
    no AESNI
  - ported to MSVC 2012, GCC 4.7, Clang 3.2, Solaris Studio 12.3,
    Intel C++ Compiler 13.0
- removed libcryptopp-gcc47.patch - fixed upstream
- rebased libcryptopp-shared.patch
- added devel-static subpackage
- updated license tag</changelog>
  <changelog author="dmueller@suse.com" date="1377691200">- remove noninstallable 32bit -devel baselibs</changelog>
  <changelog author="ro@suse.de" date="1387368000">- define as big endian on s390/s390x (libcryptopp-s390.patch)</changelog>
  <changelog author="schwab@suse.de" date="1396526400">- libcryptopp-m68k.patch: define IS_LITTLE_ENDIAN on m68k</changelog>
  <changelog author="sfalken@opensuse.org" date="1408104000">- Added 0001-disable_os_rng_test.patch
  Fixes buildfailure on openSUSE_Factory x86_64 within OBS environment,
  due to OS supplied Random Number Generator taking too long to respond</changelog>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="e3581ce34ebf46f3f0f446875daed70e7d83523ef8e6db62c21ac927f6a7c4a2" name="libcryptopp-devel" arch="i586">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="1ebf6500b0e33d1e90d94dacf0bbda29e2499aad3d22c24d8a74cc7d5c6c5398" name="libcryptopp-devel" arch="x86_64">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="42b5a8abfceb0bfc7a9f7132d5889d52d960b9511f3fc92c4ffcba991007f4d1" name="libcryptopp5_6_5-32bit" arch="x86_64">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="98242e9a1025057a3f1d9f94e85195742020e48fbc7e6d988c6211f3f8003d80" name="libcryptopp5_6_5" arch="i586">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="4dcbd25730157aeca2f766ccc57d54d8b2dcd23ebb267a59d7392caa5b0a9980" name="libcryptopp5_6_5" arch="x86_64">
  <version epoch="0" ver="5.6.5" rel="lp151.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1565611200">- Added cve-2019-14318-CryptoPP564.patch which fixes (1)leak in
  ECDSA nonce length; and (2) leak in prime fields (ECP class).
- See boo#1143532</changelog>
</package>
<package pkgid="f091456c5828d8bebb06d1c7591699e56931fbd35560d84b402e608828fb8c03" name="libcups2" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="26ca5bb2756330c70af0d20e810f02f3db3147297cf1db47e7f32a1f62f33305" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="67d3b0421e17acbe96e501eddfede3bf4a8ae7dfb182cd42a924ccabb235fbd1" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="9b80646102116b0d1bb0f27dc94e4376044d5f9c64469a6237abdc2fe78b95a4" name="libcupscgi1" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="ae51e530ebbf15873496650e59d42ef0735ae03fa967e931b9a0fccee4c4cb71" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="925089c450dd250965256a463dc1ba3bf9b941a74c80bde1c7355099e7cd6c1e" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="5cfba6a351d2f610016788268b18743b10865af37c17b09ef19b863aeedd1c20" name="libcupsimage2" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="7db18380feefaafcc58145c7999dc47a50334ddea52dcdb9dd1d2b3ae04dab5e" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="3097272673a0d19516fab79272d420ad191331312851d053f333f8d34f9edda4" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="5b29b99ead37cea309aaf34cbdd462549a082df0a6dff33fa556cdccaf040817" name="libcupsmime1" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="710f77c739c816e9047c0d3782667521fbb459d7a07b249b5b61f1a4b1003639" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="88a10e9be07ccebefa4f47126989d167b795774165bd7f7a836719379f382ff4" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="cdc6f33291906edfc6e7d4d3ccade6aa20627d06f83ce56c0c7b188aa53e2146" name="libcupsppdc1" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="9fbb41f44096d77fef850dce03f1e298858cb7db28510a14f2dc928a3b19cdea" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="0ba3a3e98e743e8ad04ceffc560c9e4e10fa79d96c82f1e5febf6e508ef91b9d" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp151.6.3.1"/>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
</package>
<package pkgid="0f7da43b8919bda8fde1a7f8a0f0e6e26ee4c80e1d52e802d5402a44a6ef1dfe" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="2dbc6b75bc7bd9a912f44c3dc1953745d8d267ba847747762a32d7839b4b3f2b" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="56885f4a39f45518f050a53704ac32d527e3320270035c25c9829a58b2a1dfd8" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="9825c0731e2088964ee50228acbbb2f48e0e4feee4095bc4c922a738771bd312" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="f24421c24f083edf1348db4bc7022de27f184b6e07a33d8bc7d81531d44b9f5e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="0cb0b6fc0bdd94d2ad3ea09b77e3a6e17ab634df106907195c4a83ebabca38fb" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="6b548e36f76e9ac8bbebda1d16d2708a9bf617df40c1ae9c1b8f76c72dd4ea23" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="32062941cb035bc1dd8a66fbedb2f25f090e8fbdfddb826862d67af15eb34048" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="f37f80794c78139f4106700ccb390f92c89df8d63ff80f24a28d7e1282bd7933" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="f831a86027af76f5dea3f20fe88df3e5f22a5ac170664496dab1ea403d9debef" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="2a540b5450767e309830db1598aafd5ff471eb5907ec429ab990b37702044241" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="63ef1da3c4855bf05137ae3c13642d50f502813f78893b9fc9b9c66eab048953" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="87fe006c0323424fcd1cb17465ddbfd58bfb37e8d027b640f94eb6aab6de405e" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="67beefad30ab7360d2a54b6012825f1cdc5588bedb01b52d0b6b1349d989d291" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="d9e91735856ec7aaae8a3f85c0dfb9dc06337e3dc7d1dae974a501ab3ae5a8e4" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="b7604ac612893dd7d52340e46e583c03afa91369fce602d4dd0c312fce501198" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="9ae854e6b70a394318de0567dee0e25761a02c9f971d655b145464a4e58017c0" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="239f2d3cd629df3cfa56d1e56b4cdab8e47c1ba5d497c6b1926ba600a6475c5d" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="38c6c34ce6b1e74842e677431c2c1364d7b73316f37622c85b5de26e4e72b428" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="74c43b219672982dd5bd3aae747c2635539c866ab2a9d5121b778c05154be5dc" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="104f896e8bad72b3fab7ae0c69b7ee459b97be6dfd48952405078d5aacdb3554" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="f78a78ee3165c46a183d5a41f05b635ab1c26a8424f1119b73464535c8f31edd" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="8d20486eb73440b5297d6b7b16ed83dd0b11726078bb64fc26b52ab1e1cd8e74" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="0bba135ddc2b494adbdf2b32e340b06f81e4ca0eb1eb147053ffe7e13c0a2385" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="e945052d85facdd6d5237f37de1584552d044afb8343e98a554177ba7b376d40" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="df77cfd0529811f90066b6192b77db4d73fe8b79fb379b55ef4c12029067b845" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="2f4df380ec8d354f5d13de923baacc138b1272d44a2bbb8c67cdc4e3637bd09d" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="d745a93284b3f97400770ae5e44b008ff498cab89a205093c98d78fe3ba47bfa" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.6.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="d1787bbc0bc1c671b41506c5ab7792d9bb2a559af3dba4c369a310e8e18bdbe3" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="414e14ba9250ef02424bf676a636f0c86b15322ad9a3b9a26316e5b896a027b8" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
</package>
<package pkgid="109b5423359dd670c6ce0dcf0afddba37921a4a12b13f0c7bbe594694366dfbd" name="libdb-4_8-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="b588f23a419041bf744e38d372fd3b076966df46614a96331983398d6dbb7786" name="libdb-4_8" arch="i586">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="170d7a5f5923f53c114d8c7293517e5cf5c563afb1e804e33ddba3aebd560f7b" name="libdb-4_8" arch="src">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1313236800">- Do not build static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="ro@suse.de" date="1353153600">- fix check-build.sh for kernel &gt; 3.0</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Rename db_ binaries to db48_ to make room for libdb-6_0
- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="werner@suse.de" date="1371556800">- Try to change baselibs.conf to fit coolo's comment hopefully</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="e5b80dd69d4dddaa6897b32d370823fa6f516bde8bf4f77df81eee360fc2e1d5" name="libdb-4_8" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="eb122ca956c60f7ef2aa3220a23a375f6132e03f55f0015aeb674a4d78fbe98c" name="libdb-4_8-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="48a6afa964c2fb01a88b353b4032b4f26653b4331610b490168bb23a7d255c36" name="libdb-4_8-devel" arch="i586">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="42577af1742f30deb8d4c49eb161679b4f3460ad52878a4564c6630f5a4361e6" name="libdb-4_8-devel" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="a8174cb414882c7bfe6d9d4996693f259fa6f23db55c37fdb306b34913ad615d" name="libdb_java-4_8" arch="src">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="dbornkessel@suse.de" date="1181563200">- first version</changelog>
  <changelog author="dbornkessel@suse.de" date="1183636800">- corrected file list
- added update-alternatives to work around a ia64 problem</changelog>
  <changelog author="ro@suse.de" date="1217419200">- changed buildreq to use any java &gt; 1.5</changelog>
  <changelog author="ro@suse.de" date="1227268800">- update check-build.sh</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="rhafer@novell.com" date="1285156800">- Updated to db-4.8.30. Important changes since 4.7:
  * Improved scalability and throughput when using BTree databases
    especially when running with multiple threads that equal or
    exceed the number of available CPUs.
  * Berkeley DB has added database partitioning. BTree or Hash
    databases may now be partitioned across multiple directories.
    Partitioned databases can be used to increase concurrency and to
    improve performance by spreading access across disk subsystems.
  * Berkeley DB now supports bulk insertion and deletion of data.
    Similar to the bulk get interface, the bulk put and bulk delete
    allow the developer to populate a buffer of key-value pairs and
    then pass it to the BDB library with a single API call.
  * Berkeley DB now supports compression when using BTree.
  * Berkeley DB introduces a new utility named db_sql which replaces
    db_codegen. Similar to db_codegen, db_sql accepts an input file
    with DDL statements and generates a Berkeley DB application
    using the C API that creates and performs CRUD operations on
    the defined tables. The developer can then use that code as a
    basis for further application development.
  * The Replication Manager now supports shared access to the Master
    database environment from multiple processes. In earlier
    versions, multiple process support on the Master required use
    of the Base Replication API.
  * Foreign Key Support has been added to Berkeley DB.
  * for a more detailed changelog see the changelog_4_8.html file
    in db-doc package.
- Removed db-utils-doc subpackage the utils documentation is now
  integrated with the API documentation.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1313236800">- Disable static libraries</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- spec cleanup</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Specify java target and soure level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="jayvdb@gmail.com" date="1508328000">- Remove unnecessary dependency on update-alternatives</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Added libdb_java-4_8-fix-java10-comp.patch to fix the build with
  Java 10 (10-internal)</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="fstrba@suse.com" date="1523275200">- Changed libdb_java-4_8-fix-java10-comp.patch to acount for Java
  10 properly and for following Java versions in a generic way.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
</package>
<package pkgid="63b8468f2f64daaf6e1cc6b5011f619e64ef22c0be6fad60d61c069f447e2dc5" name="libdb_java-4_8" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Specify java target and soure level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="jayvdb@gmail.com" date="1508328000">- Remove unnecessary dependency on update-alternatives</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Added libdb_java-4_8-fix-java10-comp.patch to fix the build with
  Java 10 (10-internal)</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="fstrba@suse.com" date="1523275200">- Changed libdb_java-4_8-fix-java10-comp.patch to acount for Java
  10 properly and for following Java versions in a generic way.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
</package>
<package pkgid="bf4c67505c864182978094449efcbd7a520f5e723eb6a701ee0b820b60716a52" name="libdb_java-4_8-devel" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp151.7.3.1"/>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Specify java target and soure level 1.6 to allow building with
  jdk9</changelog>
  <changelog author="jayvdb@gmail.com" date="1508328000">- Remove unnecessary dependency on update-alternatives</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Added libdb_java-4_8-fix-java10-comp.patch to fix the build with
  Java 10 (10-internal)</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="fstrba@suse.com" date="1523275200">- Changed libdb_java-4_8-fix-java10-comp.patch to acount for Java
  10 properly and for following Java versions in a generic way.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
</package>
<package pkgid="ee2ec48ffe5e0c0249b88d3cac171628b0c79ff82e4b2dced05ffdf1d835d554" name="libdbus-1-3" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="160457d3f3423279b72303b3bf35ffe0aa33f7e39ac7d1695b0854ee85a11ff0" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="505cb7963990c668f85eb7a74bfe77c7e0268a0bf4a4a61a77dc031061a911f0" name="libdbus-1-3-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="fd210bd85fc780521a3c4e3a8e8c6e31245e26e54bea4c000d447028273b4d04" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="40ed7b7c2c9de74761fec682ed34a9a017b42ba22c0e30141b7de8624f9544db" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="efadf71de1ed34002ac3b2b92c8d722acfcab2538bfc1c5f70b915fb6699fe90" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="cdf0d67c9c7e22799ea5958e3d0888e0841f77bbd1d7718352a1bf32abc1a00b" name="libdcerpc-binding0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0864a5daca286711625db87bf754b54502cb0c85e102f0e5b3562041b52986ab" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7f311cfbf26ae1de1dff57d006a4d6e2958f0901f60dfca9e81308e340ac385d" name="libdcerpc-binding0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="8c4aa42c6a278849e8e76a267a23d00d6621fd0ab876354b2fad76c218893101" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="57c82ef90fd2e27d5482b2c06583fba081bfdd81f4c284769522e19d0387f56a" name="libdcerpc-binding0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="9febb44bf2d95772ff13c0accbd743ee6a3fcb4ec966e799fc6b8fc05528ad27" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="db35d02c3be8c1e3d08e10878b75bc49d1419c6db6360b35424dc8965ee0b6b6" name="libdcerpc-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7b4febc2ea761778c9f091498585cc5338f84e743194d4285cc98455893621d7" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="bcc766bf758d1cbae359ae9e1b19b15e08c8f5352712dfc0fe8a7e6ef5e64341" name="libdcerpc-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="40a7d8a4efcf660f8113d719e4f0a68b6c78d86b3fee0123eb672e58fa1b2593" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="a2136e1d219c2a932c76a1c7fee424c4540642fe9f01fafa9f026e3eef480bd0" name="libdcerpc-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="e15129f80a5900ae3fcb3d086fe7bca2e4c8f90744c0c629fc9742ac6cef297d" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="965dc6479b14920272523fe35d3653a935ddcfe7aa5b8bba3ff164d8fcd09f03" name="libdcerpc-samr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4626aa8b2fc12a790456ba68e6626b27d04bb025bf89d6f508d0da7d3b5e96bb" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3a54902b507397fb309c5d5335ddcc654228a5cc6bc9706fd2948929b9f1b2ef" name="libdcerpc-samr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="95a80aafe87f249357d85cb0efec9fe527d44112d937ee4c729084dd4b16f3c2" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="b1e0fb2a209d4e05bfdbde7c8ae85db5e8032fae4d392ecf99286f88644ffa98" name="libdcerpc-samr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="305a7ddf7b2b19b8c8035740db9c85e812e1d93f2d448448be67d6933599709e" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="6d1bb4174922360824afadc1abc09593d0cd21287085fdcf0d3efee3a60746e4" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="04d25cbf0f0f56974284a98a9638c863e821e144f6067fa9e24dccbac15af7c5" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="4ef435bf9bab20caa085c01674685bbae2f32622f90f56c2613d1598b1642636" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="e3316dccd7d301c14b7bd43d08f8860f205f94cce278ff0eff9aa4040fcb2b6d" name="libdcerpc-samr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8c021ba594654829966bfeb0acf2db70126c35f93ca881fc478e51609d37df82" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3b86c31cc01711c93f6502a9dae3446d716706b4c7ada9998970164b7ce682a4" name="libdcerpc-samr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="f9354f8fb2cf38223851b626c2be44c7bf22a1511c503b94e72743c07e481fb0" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="abb6245147e327ae928611ed5121d9bf904027fc529927af00294a2117ccb00e" name="libdcerpc-samr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="f3f47d4c14981f9bfb0c687e76b2b76c00f7554615f19e2ad11fe239e0fc494f" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b725061eb4d3a6bb907e52d652750740adc4a3b5df14ec84130e75826ade57cf" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="201eb77427ac9d598c4dd89ce5953180dbed02809825a7d3ac58e74c1af163ae" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="59cf22d0816396583f00b77358b18e6b7e88786ea9db3f2572a04035eb285343" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="beacc9dbb0e582604aa1b187a7dd18fbbb570c471005786d9196d8d9ac4fa152" name="libdcerpc0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ee415455e4a09b75610b4410250dadbe71ada44b65e668048598854c92f56e79" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="76390b32e158ebba948e612ebb0df209d201aade715b861a11b559193cebca9b" name="libdcerpc0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="a86328a6b6fac37c928bec9193cbb597be9cc43795391e627a1bd56141556265" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="83d2cedaf32367b5d2da4c414155165914704fb8ea4d10fe7fa1fa69ef7bb9de" name="libdcerpc0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="d4fa185459eaf2c4287b8a3c073b99af00e493729dca42ce2d978ef59b90a55d" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="cb4b401304a292f7762450fddc1e17eb1c5c40da02fcc279684d38eef53f7d46" name="libdevmapper-event1_03" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="cfcde860b6fce1ddd4d4446677b29f84e6691c654280113549506542e2a37d71" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="be052761b74dca04d8817556bce8498cd177131b7fb8768336dcf59da8560ef0" name="libdevmapper-event1_03" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="5a06249c1279838e359def953a86d7c9cbf07cfadacdf4135756d8554b4b0d41" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="b6ae7707814f6056cd5872d3111c3700cf5ccd377a356bc64b9922f08ac1f179" name="libdevmapper-event1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="e83dde9099f58a0e256b153d361f3b1034f57bb6c368ec0a8193fcd2ee7de205" name="libdevmapper-event1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="370ac5a78f70dadb67aaab076e2d4d5e6d9be9aebee829c13b113a489cd80949" name="libdevmapper1_03" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="90532469bf857f455964247a9ff138f2d52de95a24045bbfacdb0470e48d8e63" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="71cb103e1911e7e1514160efed72e8a4a110cc719527d17aefb80dd533f9dbbe" name="libdevmapper1_03" arch="i586">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="22af7ff3ac577c4e0fed12321502156cda51aa148945da3ff6f82ba8d1bac0e1" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="7476f103535313d819b588520fe41d40912df80c73aa46d79fd15dfce39ee134" name="libdevmapper1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="292388aca28801c45dc66c27d2546a253f6acb7c5ce26d23f51b617d47789e76" name="libdevmapper1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.149" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="12c5a601be9511d577cbaf1337feee8f2e94d9acafc06ec8414872ef4b99775e" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="119709231d957b7f8187929ff49dad5e54951a6e2a260ad6b846f4d1e9b509bd" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="972857490198d350bd955a11bea981d16dffa926478ef83cad2f35263c8ac03c" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="bdd04c367a3d0c9edbc65484a91ded20678caced22f4d621a51190a65649571d" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="d3e19c50e7dd591efcb2f3d5fc632193cc2d4de51fd41932b41866912589795f" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="66dd699f6792b469f407dceb4df2cc4251ac916312154772dc269bdfd460a8c5" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="c0451bfd6f1e82ff96f1a1658857dfc829087f2abb2ffa9c14611946d1e84112" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="c5c530e8b28fa3fab26537160c3824346e90d92185999ddc74da476ae59da8e1" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp151.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
</package>
<package pkgid="0bad1de982c011c7be4cacb1c731b0138f18cb42b78cea1bebeb7d173a7c30fe" name="libdmmp-devel" arch="i586">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="d293aaa2a7e97f3c0cbeeacbab31e08deac4819b0335fe641a32ced50c372970" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="ab58b9d7a4e21537928cb719609dc83ba693d86c7dd94cdd1f88f45d19bad88a" name="libdmmp-devel" arch="i586">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="14806ed9050022df7977adcad54b97f75c86fbe60b36ca08a1637d63792ab48a" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="03f5b4f1c4c8deb305e16706eddb8a9add21ae6f222a451a8a4387a9e95148a7" name="libdmmp0_2_0" arch="i586">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="0ba8cd5e43ad5836957ddfee73bb5ea2f1dd47aba08bfff3e9bb761af70494e6" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.7.9+164+suse.e41fbd9" rel="lp151.2.3.1"/>
  <changelog author="mwilck@suse.com" date="1530273600">- Update to version 0.7.7+72+suse.4b24466:
  * multipath: fix return code handling in delegate_to_multipathd
  (bsc#1098177)
  * multipath: don't start multipathd unnecessarily (bsc#1098177)</changelog>
  <changelog author="mwilck@suse.com" date="1530532800">- Update to version 0.7.7+75+suse.6287aef:
  Added minor updates from upstream
  * multipath-tools: add info about how to enable ALUA in ONTAP
  * multipath-tools: add directio path_checker for DASD devices
  * multipath-tools: make Product Name mandatory and add all of them
  Minor rebase, as some SUSE patches have been merged upstream
  (all mentioned in previous changelogs)</changelog>
  <changelog author="mwilck@suse.com" date="1538568000">- Update to version 0.7.7+136+suse.19bb285:
  Bug fixes from upstream, and SUSE bug fixes
  * multipathd: try SCSI persistent reservations for SCSI only
  (bsc#1108875)
  * libmultipath: allow sysfs_pathinfo to return SKIPPED (bsc#1098458)
  * libmultipath: Fixup updating paths (bsc#1110418)
  * multipathd: fix memory leak on error in configure (bsc#1110418)
  * multipathd: minor fixes (bsc#1110418)
  * multipathd: function return value tweaks (bsc#1110418)
  * multipath: fix max array size in print_cmd_valid (bsc#1110418)
  * libmutipath: don't use malformed uevents (bsc#1110418)
  * libmultipath: fix null dereference int alloc_path_group (bsc#1110418)
  * libmultipath: fix memory issue in path_latency prio (bsc#1110418)
  * libmultipath: fix length issues in get_vpd_sgio (bsc#1110418)
  * multipathd: decrease log level of uevent messages (bsc#1110586)
  * multipathd: fix version check for DM_DEV_ARM_POLL ioctl (bsc#1110587)
  * libmultipath: pathinfo: skip hidden devices (bsc#1110586)
  * libmultipath: nvme: shorter topology output (bsc#1082419)
  * libmultipath: nvme: fix path detection for kernel 4.16 (bsc#1091112)
  * libmultipath: fix gcc 8.1 "truncated output" warnings (bsc#1099007)
  * (lib)mpathpersist: use O_RDONLY file descriptors (bsc#1093220)
  * libmpathpersist: fix byte swapping for big endian systems (bsc#1099036)
  * multipath-tools/tests: add tests for get_unaligned_beXX (bsc#1099036)
  * libmultipath: add (get|put)_unaligned_be64 (bsc#1099036)
  * libmpathpersist: fix stack overflow in mpath_format_readfullstatus()
  (bsc#1099007)
  * libmpathpersist: fix typo in mpath_format_readfullstatus (bsc#1099007)
  * libmpathpersist: remove duplicate test in readfullstatus (bsc#1099007)
- Update to upstream 1a8625abd (0.7.7+82)
  * minor fixes for kpartx, found by coverity
  * mpathpersist: add --param-alltgpt option
  * libmultipath: add "protocol" blacklist option.
  * multipathd: add new wildcard "%P" for "protocol"
  * multipath-tools: fix products names in hwtable
  * libmultipath: more debug output in alua prioritizer (bsc#1080965)
  * libmultipath: alua: retry RTPG for NOT_READY and UNIT_ATTENTION
  (bsc#1080965)
  * libmultipath: alua_rtpg: use condlog for error messages (bsc#1080965)</changelog>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
</package>
<package pkgid="490af23c178f379f9369cd7da42925ee5fed6c1ccf1e0f95fece1d9c14e25372" name="libdmmp0_2_0" arch="i586">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="4adc2bad4647995d4a2d83ec7a16e338fefca211b2f4049bba4de83a61a97a68" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.7.9+167+suse.07c42ab" rel="lp151.2.6.1"/>
  <changelog author="mwilck@suse.com" date="1542196800">- Update to version 0.7.9+55+suse.9fc8439:
  (note the "55" is due to former merge operations. We actually
  only have 7 patches on top of upstream. All other patches
  referenced below as "not upstream" have been merged).
  * Bump version to 0.7.9
  * multipathd: reset delay_wait_checks counter on failure
  (bsc#1114771)
  * multipathd: fix irritating "minor number mismatch" message
  (bsc#1111116)
  * fix possible failure to shut down (bsc#1110060, bsc#1110439)
  * upstream "checker overhaul" - cleanups and improvements for
  path checkers
  * Upstream fixes for failures handling path initializiation
  * various small upstream bug fixes.</changelog>
  <changelog author="mwilck@suse.com" date="1543233600">- Update to version 0.7.9+58+suse.0790830:
  * libmpathpersist: fix off-by-one error in PRIN length check
  (bsc#1099007)
  * multipathd: fix mpp-&gt;hwe handling when paths are freed
  (fix possible crash caused by new hardware table code)</changelog>
  <changelog author="mwilck@suse.com" date="1544616000">- Update to version 0.7.9+85+suse.766b95e:
  * upstream patch series to make verbosity level 3
    less verbose and thus better usable (bsc#1118937)
  * fix for handling device size mismatch in coalesce_paths()
  (bsc#1037379)
  * libmultipath: fix false removes in dmevents polling code
  (bsc#1116272)
  * Spec file: remove build dependency on dracut which causes
    build errors for some distributions</changelog>
  <changelog author="mwilck@suse.com" date="1544616001">- Update to version 0.7.9+89+suse.df77b66:
- re-enable "san_path_err_xy" options
  These have been removed upstream, but they were supported
  in SLE-15/Leap15.0, so we can't simply throw them away.
  Improve documentation, mark them as deprecated, but keep
  the code in place.</changelog>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.7.9+167+suse.07c42ab:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
</package>
<package pkgid="18aa991417d55ff5989c722e3db312382ac98c8f2d0b4531712b8af2e82c3bca" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="a079a24989fd9b50c9b706b5318e7d1a962d5377161df2f8ccbd06fd8dbf97b7" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="4aebef708184c7629e494046c703d943efca1aca7f852728e228dde0871f9a21" name="libdns169" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ee70b2dfee226afc702b225fbd02ce4f520ddff050eb333135a64baf5dbde58e" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="dd658a42a0583927b146c9ecfdde248316f2e0f8af14aab031390137908d77bc" name="libdns169" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="ae777dac4b04218c4326fdc339dd0a86b2d47d13a9922166a6db43fe0f26adc2" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="3bbd3e13e7f830d2c4808fc57f68717a81f6660ff9636df38f5933ad4c30fa6b" name="libdolphinvcs5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="6ffca580042c2d95049f8921adb2a7c1c2ea282f386330bef15fea9e8488cf4c" name="libdrm" arch="src">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="aa3180177dd52abf37fa6e78474d1f3a347a4fd3f110cdfd888ad45da435704f" name="libdrm-devel" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="db4a13f068034c3a606d1a960044baeeb246b3b96b6c2ef2b2af027bcefe293e" name="libdrm-devel" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="d421680be7185bb9100cf27f9f5e14f38697b289c5b7dae3c56e28893ee38740" name="libdrm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="34b7d8117404a8d1e1067ab3872b18e0ef3abc965f1752cfd25ca9ce1f54f6ab" name="libdrm-tools" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ac971881adda38207437d248ece110523e92ed5615f29f9eae448d04769b15f6" name="libdrm-tools" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="fc992be6eda988a73bdd3d71e283c90cd17b9ae23b418337fb82df34879e1d0e" name="libdrm2" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6f0739ead45e22afcc5707dccbba4c62660cde1282700bde292e0f674936b9e4" name="libdrm2" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="8a03945701700c58174731c8a7bff52e81d001e82f329dda3d38ad4dc8becde3" name="libdrm2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b04bae73a9e6eea12f170c6f047645914b27ca297e353fb47640ca4417c029ec" name="libdrm_amdgpu1" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4b9d9f149102f2f4df4a1984533872762bb3fd3f0617a9025decb3f84489b1ae" name="libdrm_amdgpu1" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="ea7341d50ac9c14049dea0646a17097f9d096e5c0b8849a470011e5c04ce70ec" name="libdrm_amdgpu1-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1f0d03131c8cd4d42313afa214300f134dac4e173421296b154d9991e421aa51" name="libdrm_intel1" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="1eb6590bd5e8fd2422e1116801bc4d1fb2c2449321a14c451b939375dfb5604b" name="libdrm_intel1" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e9b340abe41e3da159990270e939d88bb9051f1d3a2f274689d0f4327f488121" name="libdrm_intel1-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="8676e4b9e76eaa2848232e0abb211381aba84dfd0926df3159274eed565c26a8" name="libdrm_nouveau2" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="b2e6cb48a82e77bcd0949045741afd0c8fe46d712015ce95e1998c11a70590f8" name="libdrm_nouveau2" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3fe9858db67c4e471a642c0dd45363dc575809eb84c630da12b590f543fdef81" name="libdrm_nouveau2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3c44d66cb933eb0ad1369e2ab4bb9a5ba437399f8f34434c76aebf33a7706b20" name="libdrm_radeon1" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="3eabf831eeb08b2c3581154f50ebeb63f73f8d83240c32e6fb26f8411304c3ac" name="libdrm_radeon1" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="e9eafb281a47e8cb59a9383dde777c9d38445f779dc4d56799f25ec73dcb179d" name="libdrm_radeon1-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="a6f1a74384eec665c890fda6ad1141ad5411656ec5f45150d7b1eb06faff557a" name="libdw-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b1e9628ac6a7842dd64804a3190fc67d0325f24d384d547b4aabf0323a4f2c14" name="libdw-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="9513666005db767f78eba1ea342a0335e3a0a8db5d5a959f04851c01278e2d09" name="libdw1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="a0d22e2732d5790a631ef2a2b80b3892153dea67c67bc669f4e53d0e9e82cc56" name="libdw1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="deb16bbb4897195b022f88f5053d27849b0332c8bc1d1858f9da90216ff8db52" name="libdw1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="d2aa53731aaffb9a548d5723b725dd071305557d29b0c65a151e6d513774d984" name="libebl-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8bb5f7512205eb71f60765816bd3653debdf1c73be83ad03e509a24a7a27da27" name="libebl-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="e836d6aa68631636ac84ec0f684e979d801084761b4f75440e3234e882dbc2b5" name="libebl-plugins" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="ff45c734db8acec6652a44ab7824464c85e6ed938e4aa0d5da0ab1cd4f134e50" name="libebl-plugins" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b99578606c7fc6d277411d1746852f0a992d43697af4cd89baf48971877c56aa" name="libebl-plugins-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="6a2035be0ed33dd46951c6c0372117a77a4bfcf766b1d1b619740fcac489dc47" name="libebml" arch="src">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="30f2a2cf8ec6205b72be3ee2d106b90b13f5c975f4c396176f10099a90d2194f" name="libebml-devel" arch="i586">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="3a80dcfc39f08b25b5e04fa619d42f9898b27677be0a227791cfaf5174009f75" name="libebml-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="cec39aeac0341c9158d53d5f9f00daf0c7e727bbd2cd531bdb06e99228380945" name="libebml4" arch="i586">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="fa628a303ba8ecdd7a476a35401a1a3484e01581f7b1ec538d8e364a1bc86373" name="libebml4" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="0d00a95596bc3943a68e21164fde5227a9cb221b66e4ead98d986ad8c13f6b95" name="libebml4-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="f43a2e855a88bef117062368e047d2f3ac88d32cf26d901c2b7fe957cf6c0f18" name="libecpg6" arch="i586">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="9aadaa54cff137b40c4ea291a378e64f9a8bac0674ee5d03b28d53b3a6e92229" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="96cb1c94ecef032d9e00f1da40fcb54357c3837ce0f2e352085759351789a1ba" name="libecpg6" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="83d10148568fcd224ac8c32652c0a13f58458da4d673ee2a44351f7a12cd8ac1" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="6c59dea9261dd688a28ee6538b93c003ceeeb5bfad13e0441f7fd90d699851c3" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="5286bbfc77d601f175c0d66312805a7c90c18253272d7298215124f6a8e2b7f3" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="3727f3398a5202198a12d039c269ee099b588c9b91cea66e1f4b1495dff6e7db" name="libelf-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="6c341ac08567e1648ce4bf5e644e621b542c0f05a71cf5b94077057f02301735" name="libelf-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="1fc73b67057c23a44c3b51ec657702b87745e0df30efac0bef77862974668c84" name="libelf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="04350ac88f7fd4f638104c6953477dfd9ee3c6dbd9f8c00021a46640732ced23" name="libelf1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="d7c98d6bcf12fd16bff52cfd0e97d43b2dce00bd6ff59d6b74524bc9b507afab" name="libelf1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="013a6d75415dcbf3733fba31a6042e08b3a45833c7bbaaad12140ae1129ad85a" name="libelf1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="440b4c48adc8d984d6a119e0ea538d6e33826e96a84af943a22d6b03b3b02268" name="libevdocument3-4" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="ecc7dfc4630e3e84641974ca8104df900ab86eeed427e8567efbf82154c5abee" name="libevdocument3-4" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="02cdaf91c6041267587f41530a78bd59fd043da45651382f5bcf1c53c942ca07" name="libevtlog-3_19-0" arch="x86_64">
  <version epoch="0" ver="3.19.1" rel="lp151.3.3.1"/>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
  <changelog author="peter@czanik.hu" date="1542024000">- update to 3.18.1
- remove support for SLES11 (sysvinit)
- add support to compile on SLES12+ and Leap 42+
- tons of clean-up</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543320000">- Replace time-sensitive wording of summary.
- Drop %if..%endif guards that are idempotent.
- Replace %__-type macro indirections.</changelog>
  <changelog author="peter@czanik.hu" date="1545048000">- updated to 3.19.1
- changed summary again</changelog>
  <changelog author="schwab@suse.de" date="1545393600">- Allow building with java 1.8.0.
- Use %license</changelog>
  <changelog author="peter@czanik.hu" date="1546948800">- added 2482.patch to resolve GPL-2.0 vs. BSD-4-Clause
  compatibility problem.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1548849600">- Dynamically detect used python3 version.</changelog>
  <changelog author="root &lt;peter@czanik.hu&gt;" date="1555070400">- oops, forgot to update version in syslog-ng.conf again...
- moved slack SCL to curl sub-package to silence warning
  on startup</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1572955200">- fix timezone package parsing (bsc#1152420)
  0001-zoneinfo-update-TZ-file-header-and-body-comment.patch
  0002-zoneinfo-fix-typos.patch
  0003-zoneinfo-rename-isgmtcnt-to-isutcnt.patch
  0004-zoneinfo-remove-untrue-assumptions.patch</changelog>
</package>
<package pkgid="c6b00b153c06e14a1f36c331ecb9fd6ca48d5359564b919a7599b60220d975c3" name="libevview3-3" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="35c318389afc5ac6c8955acca811e6b3256bc4b92fe0d77fdc4722e98c8acc16" name="libevview3-3" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="06438df125894fc40ccb785dfd2148601ea020ecac53ac63498ade6b26ca4cc0" name="libexempi-devel" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="a1b2675685a235b5826942e566814b8ec90db7498469ddfc36de8c7877fecf92" name="libexempi-devel" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="e68b38c4a56c0c1747ba664a438710bd4d59df1c5f42e0158384ecc786c46d3c" name="libexempi3" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="c311058f5a9a646e5135f915ff44279f41e50902165baaddae2890753a06ad6d" name="libexempi3" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="1aa71784d71d30444573b7665a99278a244105654861aeb63993843fb8f908b3" name="libexempi3-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="a6f84bbcbf7c8bc6f4928ca86905a95e141d9aa7ced28cf66fdd23c8662e650c" name="libexpat-devel" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="82b8de4a5ef1a6935e35fd325ff29592ad9a91cdf38f86cb54a4c0e944c8dedb" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="8557ad90bce5d5ebc547535155c486e362ded705629605b816ccea925a3b80b4" name="libexpat-devel" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="541f6c80af163e53ac874bdbe660df3230f899c04faa0027c6914c452e1f02be" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="729029a025d4467e450350a178686e70fa6a6b3a4a44bc00e722727586429fd2" name="libexpat-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="c8fed5ef432f48a5620366b457c3129389e878fe7992dcbc6a94c43355ad9ecc" name="libexpat-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="3e1dd09744738e08342cf2eae85a8399a915fee29751df9ac88bd5e5d1e26eab" name="libexpat1" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="44974108e69612eb445e80ff2c0f3cbe703b66fb86a01930c23d9c68b3f6896c" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="a377f6af9fd9f9e63bf2e9a94854ca9a407a7a4232ef73126880ebbc6440a88f" name="libexpat1" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="67eb3b2399a1a4607a2f8faea5d938b9be113ef14c48a9cc03066615f449fdf8" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="1dfddbe269b8ed2994a8e090b064559dfd5db3aaeac1a36416f8790215a9c56b" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="77db46dd79f1692f9b354ed9c87ea1ed20cab0b2b0d56a1f388af52d521cb4cb" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="10dd5d550e7d18290309054d7be2393692ddd1ce81bc8ad4142b268b8e311836" name="libext2fs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="93f46bb815ef2cacd4362fe62680ea6695db3184dc839f0808148cfd776f3fef" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="316945c4e675e16553df9fa13753eb83c92fadabce45eb45e727458e2f6ba24a" name="libext2fs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="9f0aaabc30ba5d856fcda0771d189f364aa5619e069bcbf0ff727cbdae71c43b" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="febcba782bf2c99140d9cfc02f04efc4422d0580ba30012d2408043780f86659" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="5156481eb2cc526fb3ae3be3e3a4ec4f1f59e16d36539dffc205cbe8d01d317f" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="39bdb4cda3d95919457e18440cc5d7bec5685657a341ebb9b183f0892b417e6d" name="libext2fs-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="abbc59c6e3fb0000dd1bfb793a74af273d78c8cc87481b9155103d1f364c59d5" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="6db787894c4b1d2d4ddbd9c2e2bf47630ed7d13221fb50bb21860a748a65bf23" name="libext2fs-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="5e32e6a9ee78880e47d3c28d795bd2236d75303b6129d9f4b7df279a9aa474ce" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="c35e425edc254aa7dc9f08398c9e068535cd14bce5e626dd5bce87d3d672f6e7" name="libext2fs2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="b42a83ee6b8eab1d075ea80a6227fbe5c217d36697c130674b3f4958bb528be5" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="aad0b235acd7c26dc25872454679f38bdf6435eb9f149dc8d07a2d9891900a32" name="libext2fs2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="9c7a49cdfdd8714eb38c1ef5290975e7650418a581c3007e1b1ea8f767360519" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="64302e7dc8d2dd6dd56c52a48e186835ab303e07ada8054bf1d4834f66fbda75" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="7fc4d78af678028dc50162a84a23bd8cde401fec6606388ffe3908c64fd15328" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.6.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="63f0d0f24e7bd803164fd670a242c398a2d4c8dcd4bc0f00f08d108d17763925" name="libfdisk-devel" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="d1cf03700255f6a0bb620964c80abdb85c2fd37f8f27fff2e4ca21ca546dd31a" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="e688e1fcc0677f6c6cda43335f84bfa8506db7678b3a17fcdf7ab5feaecc41b1" name="libfdisk-devel-static" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="acab721ff6faf6c6317ca2656b7232d228f430a9cdfbeccfa107201740292cd5" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="945aefeafdcda3e2dcb0e859253b61e6b72b4c55ad58d8f5cd98c4a6dccefc9d" name="libfdisk1" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="7182f4e6e0e83037aac7a5cc9fed33ba2106e8aee258d6078f43ced8103bb948" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="3bb629dad226dcc4c1913f3e35d8fd56669095dff34f7bd199113de9c0dc7941" name="libfipscheck1" arch="i586">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="dabdd3f83ad475b24cd02a724bce0755109307f312eae745a3cd513b14776994" name="libfipscheck1" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="29dc481b515326ff00e9377504da08c2bf215e81b3258fc86b714aaa63bced06" name="libfipscheck1-32bit" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="lp151.3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="0f564563d7bc43d3f9f88ec8608af4c9572f272feaa8dbd0cc4deeb74efd3819" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="0ed085914acfb690b0fd4c916777f4f14650df4750ba63f06c123bff2d227a9e" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="828507efdcfcb8a24ced55cdaf259ce2cde4c412bdf52575da5ff406226eb495" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="53c6f83cac0d8bab851c1f0c452b9f2ec0f6c3fd00f0043f40b406b31ee7986b" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="e2b3879e1e790eccbdeaae67b2094c48370fbb0f43162a7c71eb13b1f2f8da74" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="3bfcf4e8a55b048b677eef1cddf146d023697513a1c15427f534b3906324fde2" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="a220e14ea3b5478259909a56d8e21b23906e9cd5b8ffc8d37085aba8cc318d06" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="f2b8a98f12374d3c8a8aac814760649748896fe3bae060e51a9afa6a562a9769" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="10311eb2f27ea58bce31718e06ef5529dfc190313a729d1961d2b2d951eac7c5" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="f2cda143866925169c80092b679aae7d01601f3289c87b2a6cc481b87906436f" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="de30f83cffe9e5ae34e5bb36e8367d2dae8717d9dd3bb7a30e54de85958babb7" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="760bae8a360ef6f63c9628aed14ff9587bb7a6230840b48fbecbc76449e45761" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.45" rel="lp151.2.6.1"/>
  <changelog author="wr@rosenauer.org" date="1489665600">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
</package>
<package pkgid="0c171b862a377e1221701c9614b0dc01a3594fa8aaad1c80c6fb218056e065da" name="libfreerdp2" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp151.5.3.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1572264000">- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)</changelog>
</package>
<package pkgid="3aefe11591839b20d377b38891c2f637df86c30ba56f76b9720f0f177aa12fa3" name="libfuse3-3" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.2.1"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="92dba88f4cb8622d8dd7fa48f1c7647b1bb57ef4b41ed6097e888bc6e4f732e7" name="libfwup1" arch="x86_64">
  <version epoch="0" ver="12" rel="lp151.4.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="a278489624418c038dccad4614b2b5bb8c756522d85eb8840e094189a4523a46" name="libgadu" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="aj@suse.de" date="1178884800">- Remove duplicate post/postun sections.</changelog>
  <changelog author="crrodriguez@suse.de" date="1204977600">- update to version 1.8.0
  * using protocol Gadu-Gadu 7.x
  * direct connection fixes
  * minor fixes
- disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1219147200">- Updated to version 1.8.1:
  * fixed memory corruption in gg_dcc7_send_file()
  * fixes in sending cached data
  * endian fixes
  * documentation fixes</changelog>
  <changelog author="sbrabec@suse.cz" date="1225281600">- Updated to version 1.8.2:
  * fixes remote denial of service via contact description
    (CVE-2008-4776, bnc#439770)</changelog>
  <changelog author="sbrabec@suse.cz" date="1248696000">- Build with threads support (bnc#525312) and SSL support.</changelog>
  <changelog author="fisiu@opensuse.org" date="1274616000">- Update to version 1.9.0:
  + support for new version of gadu-gadu protocol (8 and 10)
  + images sending fixed
  + resolve name schema option
  + doc and test programs
- Add libgadu-mem-leak-fix.patch.</changelog>
  <changelog author="fisiu@opensuse.org" date="1286625600">- Update to version 1.9.1:
  + fixed memory leak in html messages
  + improved converting messages to html
  + status flag can be changed now
  + improved direct connection API
- Drop libgadu-mem-leak-fix.patch: fixed upstream.</changelog>
  <changelog author="fisiu@opensuse.org" date="1298030400">- Update to version 1.10.0:
  + ssl connections restored
  + typing notifications
  + multilogin support
  + buddies' info enhancement
  + support for additional xml events
  + initial file transfer over server
  + partial import of new-api branch
- Spec cleanup.</changelog>
  <changelog author="fisiu@opensuse.org" date="1300449600">- Update to version 1.10.1:
  + improved direct connections
  + improved connections over proxy server
  + some minor changes</changelog>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="fd4d6b5ed75ce48fdf3cb30c23c24eca65202da02d044f7430d2ded626ced455" name="libgadu-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="ca289a2e9e6e7bea94703e36b016abde6971df19ca02884b25aa11685c3dfa20" name="libgadu3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="f7a52d25b6925a1454bab458921d89bfb25df5894a422d35e9e035ecf4226d12" name="libgbm-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="74bb948c742c454d8a71566d8e17730dd916704e0de758e210401790805e3500" name="libgbm-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="bc64bc4535a4cf9dbba67933ddf0c82855d270c14615299a2691452fd3a4ebc5" name="libgbm-devel" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="dbb2e93e2d7f0b533d0a4b837c7c224293b881d7b8ee387f66d84d1d525b8e4f" name="libgbm-devel" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="1ca88ec4ff4351f3fde38be7d435ba2c04ce375c312e114722306dfd0d55c07d" name="libgbm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="a8a5304c30c813ba0f03fd8e5c979c4be4103130cbed33d8c0f85785c0f54940" name="libgbm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="d9445bd259cb9d1aafe21ecc89d6ecc0a7b3354e0704f59baaa8079783feede2" name="libgbm1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="8b3ab3148e1fb14b7d1a59171b2b2b8fba3ac365824ecf043ac095b9151e6b1c" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="34b94bdeaea571756f9f1e34d5836acd7c80f9b840029861742127b5d8d86f4f" name="libgbm1" arch="i586">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="54a09e7ce6776247bf7e5eb6111879a8b0ed2344458810f090076052d58ab753" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="a1cdd3b396d2739104f762db9cbba9ab7ab39fd46f37ffa5bfb01514225e368b" name="libgbm1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.3.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- Update to 18.3.0-rc2
  * second release candidate for Mesa 18.3.0
- supersedes the following patches:
  * U_intel-aubinator-mark-ftruncate_res-as-MAYBE_UNUSED-i.patch
  * U_intel-decoder-mark-total_length-as-MAYBE_UNUSED-in-g.patch
  * U_python-Fix-rich-comparisons.patch
  * U_python-Use-key-functions-when-sorting-containers.patch
  * mako_4_radv.patch
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch
- /etc/drirc moved to /usr/share/drirc.d/00-mesa-defaults.conf</changelog>
  <changelog author="sndirsch@suse.com" date="1542283201">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="4ef515295c1cd92b46bf277f928955835214d7aec8a6ff5b12dd2d0a1480dc98" name="libgbm1-32bit" arch="x86_64">
  <version epoch="0" ver="18.3.2" rel="lp151.23.6.1"/>
  <changelog author="sndirsch@suse.com" date="1542283200">- moved /usr/include/KHR from libEGL-devel to libGL-devel since it's
  now being referenced by glext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1542456000">- Update to 18.3.0-rc3
  * third release candidate for Mesa 18.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1542888000">- Update to 18.3.0-rc4
  * fourth release candidate for Mesa 18.3.0</changelog>
  <changelog author="Tobias Klausmann &lt;tobias.johannes.klausmann@mni.thm.de&gt;" date="1542974400">- Use rpm variables for the drirc.d path</changelog>
  <changelog author="msrb@suse.com" date="1543233600">- Remove n_drisw-Do-not-use-drisw_put_image_shm.patch,
  add u_constify-struct-drisw_loader_funcs.patch
  and u_drisw-use-separate-drisw_loader_funcs-for-shm.patch.
  * Replace workaround with proper fix for crash in VLC and
    possibly other applications. (boo#1113533)</changelog>
  <changelog author="msrb@suse.com" date="1543320000">- Place khrplatform.h into new package Mesa-KHR-devel. It is now
  required by all devel packages that need it. (bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543320001">- added libGL-Mesa-devel split-off provides to Mesa-KHR-devel
  package, since /usr/include/KHR/khrplatform.h moved between
  these two packages (related to bsc#1117365)</changelog>
  <changelog author="sndirsch@suse.com" date="1543492800">- Update to 18.3.0-rc5
  * fifth release candidate for Mesa 18.3.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543924800">- Add u_wayland_egl-Ensure-EGL-surface.patch: wayland/egl: Ensure
  EGL surface is resized on DRI update_buffers(). Patch is sent
  upstream already.</changelog>
  <changelog author="sndirsch@suse.com" date="1544184000">- Update to 18.3.0 final release
  * The top highlights include:
    + GL_AMD_depth_clamp_separate on r600, radeonsi.
    + GL_AMD_framebuffer_multisample_advanced on radeonsi.
    + GL_AMD_gpu_shader_int64 on i965, nvc0, radeonsi.
    + GL_AMD_multi_draw_indirect on all GL 4.x drivers.
    + GL_AMD_query_buffer_object on i965, nvc0, r600, radeonsi.
    + GL_EXT_disjoint_timer_query on radeonsi and most other Gallium drivers
    (ES extension)
    + GL_EXT_texture_compression_s3tc on all drivers (ES extension)
    + GL_EXT_vertex_attrib_64bit on i965, nvc0, radeonsi.
    + GL_EXT_window_rectangles on radeonsi.
    + GL_KHR_texture_compression_astc_sliced_3d on radeonsi.
    + GL_NV_fragment_shader_interlock on i965.
    + EGL_EXT_device_base for all drivers.
    + EGL_EXT_device_drm for all drivers.
    + EGL_MESA_device_software for all drivers.
  * Additional features:
    ANV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_pci_bus_info
    + VK_EXT_sampler_filter_minmax
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
    RADV
    + VK_EXT_calibrated_timestamps
    + VK_EXT_conservative_rasterization
    + VK_EXT_pci_bus_info
    + VK_EXT_transform_feedback
    + VK_EXT_vertex_attribute_divisor v3
    + VK_GOOGLE_decorate_string
    + VK_GOOGLE_hlsl_functionality1
    + VK_KHR_driver_properties
- supersedes u_constify-struct-drisw_loader_funcs.patch,
  u_drisw-use-separate-drisw_loader_funcs-for-shm.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544443200">- Fix baselibs.conf entry for Mesa-KHR-devel (missing "-")</changelog>
  <changelog author="sndirsch@suse.com" date="1544529600">- n_Disable-Xshm-for-now-since-it-results-in-render-erro.patch
  * Xshm results in render errors and missing screen refreshes on GNOME3
    in a qemu VM (cirrus emulation) [bsc#1118149]</changelog>
  <changelog author="sndirsch@suse.com" date="1544616000">- Update to 18.3.1
  * This version disables the VK_EXT_pci_bus_info extension due to
    last minute issues spotted in the specification.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1544616001">- Only BuildRequire pkgconfig(vdpau) and pass --enable-vdpau to
  configure when building the drivers. Helps us break a build
  cycle.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Add etnaviv, imx and tegra supports for %arm and arch64</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1546689600">- Enable the surfaceless platform, which is needed by KDE CI
  environment for testing (https://phabricator.kde.org/T10245)</changelog>
  <changelog author="sndirsch@suse.com" date="1547035200">- redisabled support for tegra, since it just got disabled upstream
  in git master ...</changelog>
  <changelog author="sndirsch@suse.com" date="1547812800">- Update to 18.3.2
  * In this release candidate we have added more PCI IDs for AMD
    Vega devices and a number of fixes for the RADV Vulkan drivers.
  * On the Intel side we have a selection ranging from quad swizzles
    support for ICL to compiler fixes.
  * The nine state tracker has also seen some love as do the
    Broadcom drivers.
  * To top it all up, we have a healthy mount of build system fixes.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-Add-support-for-Comet-Lake.patch
  * adds support for Cometlake (jira #SLE-4983, bsc#1137515)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Mesa-libEGL-devel needs Mesa-KHR-devel (bsc#1117365)</changelog>
</package>
<package pkgid="ba04775ede0ec0f0b8adb1e5e32b4a3d58fbdf3e417d43d88e256350105f6f4d" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="0797cf4c0b96efac47b415855e74f0f323f1d89ad53d9b589b40465e374cdc71" name="libgcrypt-cavs" arch="i586">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="085169b25a45f8289a3d2d600da38a7ddfe7ec7d2466e7160047bbfe3266dc4f" name="libgcrypt-cavs" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="08ed5c0d2e6d07718038e3f0e2dadf2c610b031f628d3d443eb01a6074aa5804" name="libgcrypt-devel" arch="i586">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="763b1c1ec5c33f18e0416ebf252ef900f8e985d94e5295c33f07cda078127066" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="9e99ca13b29e07369b0836ef1e36aeec1524e40bf7f955d3b7d9dd3e3a64330a" name="libgcrypt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="095c09e158cfed434401605e71c3ba73e7a2e8caf8bf5f0eed76ac1345183603" name="libgcrypt20" arch="i586">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="c7f0a6d6529742932f214c91895dba2d5561f1b72aa7f7654c9bf70ab6228a27" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="beee73041bcde18e052d25da3cf9b12a303384f00e80071dbae6381ff099f77a" name="libgcrypt20-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="2e3bef32056d1230e9348bdc959989ed85d6f5fc725245f9bff8c7305e39eacf" name="libgcrypt20-hmac" arch="i586">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="e6cbc9feea54c3a15aa1b5faeb56d4550428eaa0d2c5352c02f39faa13dd3669" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="e091acdabfadb5fd2d235ec1ef32215d95c15aebcbfc158581104660802cf222" name="libgcrypt20-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.9.4.1"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1543406400">- Fail selftests when checksum file is missing in FIPS mode only
  (bsc#1117355)
  * add libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1551960000">- Skip all the self-tests except for binary integrity when called
  from the constructor (bsc#1097073)
  * Added libgcrypt-1.8.3-fips-ctor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553256000">- Don't run full self-tests from constructor (bsc#1097073)
  * Don't call global_init() from the constructor, _gcry_global_constructor()
    from libgcrypt-1.8.3-fips-ctor.patch takes care of the binary
    integrity check instead.
  * Only the binary checksum will be verified, the remaining
    self-tests will be run upon the library initialization
- Add libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
- Drop libgcrypt-init-at-elf-load-fips.patch and
  libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601600">- Enforce the minimal RSA keygen size in fips mode (bsc#1125740)
  * add libgcrypt-fips_rsa_no_enforced_mode.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553601601">- libgcrypt-1.8.3-fips-ctor.patch changed the way the fips selftests
  are invoked as well as the state transition, adjust the code so
  a missing checksum file is not an issue in non-FIPS mode (bsc#1097073)
  * update libgcrypt-binary_integrity_in_non-FIPS.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1562068800">- Fixed redundant fips tests in some situations causing sudo to stop
  working when pam-kwallet is installed. bsc#1133808
  * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch
    because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
</package>
<package pkgid="cd1580849120a8b3fd8d1fca00abb3fa2ebaf2410f872977f817887b3c7de508" name="libgd3" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="0df103a3d2becf2a5f6d23c215d018fb1ba1bb60ceebfedb71dfc8c3b6d0b93b" name="libgd3" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="ecd80eaed3a1c97e32b07c9132325ae7f0dcbc7502314862aaab9e97524eb56a" name="libgd3-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="f4df6ac5c447884f8c48cff75f721a8cc0b1bc8ec277540ec7ce61f8a5b140f5" name="libgdal20" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp151.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1521720000">- Update to new upstream bugfix release 2.2.4
  See details https://trac.osgeo.org/gdal/wiki/Release/2.2.4-News
- Remove merged patch gdal-json-c-0.13.patch
- Maximize usage of pkgconfig</changelog>
  <changelog author="bruno@ioda-net.ch" date="1522929600">- Fix boo#1088014 by adding missing LICENSE in lib and main package
  Remove misplaced LICENSE.txt in /usr/share/gdal</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525694400">- Add optional support to ECW5 JPEG lib support disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526299200">- Upgrade to new 2.3.0 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Source code is now hosted on github
  + RFC 70: Guessing output format from output file name extension
    for utilities
    https://trac.osgeo.org/gdal/wiki/rfc70_output_format_guess
  + RFC 68: C++11 Compilation requirement
    https://trac.osgeo.org/gdal/wiki/rfc68_cplusplus11
    GDAL now requires a C++11 compatible compiler. External code
    using GDAL C++ API will also need to enable at least C++11
    compilation mode, if the compiler defaults to C++98/C++03.
  + Stricter const-ness in OGRGeomFieldDefn, OGRFeatureDefn and
    OGRFeature classes, impacting out-of-tree drivers that subclass
    them.
- Packaging : redone patches against new version
  + GDALmake.opt.in.patch
  + gdal-libproj.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1527854400">- require libopenjp2 for devel package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Add optional filegdb_api support, disabled by default</changelog>
  <changelog author="bruno@ioda-net.ch" date="1530878400">- Upgrade to new bugfix 2.3.1 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.0-News
  + Fix build with recent Poppler (0.64) (#573)
  + PDF driver: fix build against PDFium (#612)
  + Do not use json-c private API RDA and AmigoCloud? drivers(#618)
  + fix build against MySQL 8.0
  + Include gdalsse_priv.h from user defined paths
  + Unix:
  - update GRASS drivers to support GRASS 7.4.0 (#633)
  - configure: use CXXFLAGS when CXX is used (#693)
- Packaging : redone patches against new version
  + gdal-perl.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1531224000">- Enable KEA support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531828800">- Add patch to fix ECW5 detection in configure:
  * gdal-fix_ecw5_detection.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532692800">- Fix FileGDB support</changelog>
  <changelog author="bruno@ioda-net.ch" date="1533038400">- Remove patch gdal-libproj.patch, we can't have hardcoded libproj
  soversion. Replaced by dynamic sed formula.
  Fix boo#1102889</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1538222400">- Update to new bugfix 2.3.2 version
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.2-News
  This adds 65 bug fixes on top of 2.3.1.
  The C and C++ API and ABI are unchanged.
- Packaging:
  + spec-cleaner -m -i URL and Requires order changes
  + Remove patch gdal-fix_ecw5_detection.patch (merged upstream)
  + Redone patch GDALmake.opt.in.patch with version 2.3.2</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652800">- Update to 2.3.3: Bugfix
  See details https://trac.osgeo.org/gdal/wiki/Release/2.3.3-News</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545652801">- Update to 2.4.0:
  * In a nutshell:
  - New GDAL drivers:
    ?BYN: read/write support for Natural Resources Canada's Geoid binary format
    ?EEDAI: read-only driver for Google Earth Engine Data API
    IGNFHeightASCIIGrid: read-only driver to read IGN-France height correction ASCII grids
    ?NGW: NextGIS Web read-only driver
    NTv1: read-only driver for NTv1 datum shift grids
  - New OGR drivers:
    ?EEDA: read-only driver for Google Earth Engine Data API
    ?GeoJSONSeq: read/creation support of new-line or record-separator separated GeoJSON features (#378)
    ?NGW: NextGIS Web read-write driver
  - Improved drivers:
    BAG: add read support for variable-resolution grids, and write support for single-resolution grids
    GTiff driver: add Lerc and WebP codecs
    PostgisRaster?: add support for out-db rasters
    RMF
    MSSQLSpatial
  - RFC 72: Make GDAL Python autotest suite use pytest framework
  - Add /vsihdfs/ virtual file system handler for Hadoop File System (via libhdfs)
  - Add /vsiwebhdfs/ read-write virtual file system for Web Hadoop File System REST API
  - gdal_contour rewriting: speed optimizations and capability to compute polygon isosurfaces.
  - Remove PHP and Ruby bindings.
  - Continued code linting in C++, Python scripts, Shell scripts and autotest
  * Backward compatibility issues
  - The value of COMPRESSION_ZSTD used for ZStd-in-TIFF compression has been changed.
    ZStd-compressed TIFF files produced by GDAL 2.3.0 will not be readable
  * Full changelog: https://trac.osgeo.org/gdal/wiki/Release/2.4.0-News
- Add md5 checksum
- Refresh patch:
  * gdal-perl.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1548849600">- Add upstream patches to fix build with the latest poppler in
  Tumbleweed:
  * Poppler-revision-version-management.patch
  * add-support-for-poppler-0.72.0-and-0.73.0.patch</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1550923200">- Use the Python package name 'GDAL' as used by upstream</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1551960000">- Fix boo#1128276 by providing correct Obsolete</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1554379200">- Update to version 2.4.1 (52 bugfix release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.1-News
- Packaging:
  + Remove merged upstream patch
    add-support-for-poppler-0.72.0-and-0.73.0.patch
    Poppler-revision-version-management.patch
  + Add pkg-config-libpq.patch upstream issue#1412 pr#1418 wip
    use pkg-config for libpq
  + Secure libproj detection with tail -n1</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554984000">- Fix build with fgdb_support option enabled</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1572868800">- Update to version 2.4.3 (bugfix &amp; security release)
  Full changelog https://trac.osgeo.org/gdal/wiki/Release/2.4.3-News
  Fix CVE-2019-17545 boo#1153918</changelog>
</package>
<package pkgid="5091f94ac21ccfee2e6a1ed6b2fe774028bf3743b74125b5b601197eb8cee0bb" name="libgdm1" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="1398b6f142446e8f4a7a83351ce7ffd2badc5f86a544ec9f81a5cb1363390f24" name="libgdm1" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.6.1"/>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1570536000">- Update gdm-switch-to-tty1.patch: Switch tty to tty1 after
  plymouth terminates (bsc#1120307).</changelog>
</package>
<package pkgid="e9a71f8da0ba69dbdb262eee06192e7ed5a6739d81e2035a11788b814cd4039f" name="libgfortran4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="de9b29523b1bac23c170a51a24d5c4186d33a41a813a616dd0842bcc68a3a103" name="libgfortran4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e94b5d087db29f089ed0169c82d05720fecfb55996d7bd5793d73865eacd21ca" name="libgfortran4" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="f008b3fa3efd32dba7f807f2fdf8b6c443b448da666e57873a725d2bbbb14a41" name="libgfortran4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="b4448bed05d16f45f47b0b2a4c8e95e5ccc952c5369f77379514e5086071c731" name="libgfortran4" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="daf775bd81696892ca1e76d5ea243c0451b156e793b523bcba02c0983730184e" name="libgfortran4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e1e2471a4a7e9a2d175365d3b1fa60ac407e662fe12161890b2e563d33fed365" name="libgjs-devel" arch="i586">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="db2c7e11a5e53fc29d891c79720db7f0a8d8afb5097fe52a888ff8b7f8b6fc58" name="libgjs-devel" arch="x86_64">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="2316c83350a1b9c1b0eb025035520ad79d1cf5197268e3d9679c4a4af7e895a2" name="libgjs0" arch="i586">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="5f31c19dc7323e2ec757ae2c411f74d7e1348c4154f36509c2449abdbbc5631e" name="libgjs0" arch="x86_64">
  <version epoch="0" ver="1.50.4" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="e072f6b55a69f063fc5f1ef24310062fbd9b7aadbea2b69fce597ac90f9f5313" name="libglue-devel" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="84643b206895858300e0310451cf1b37078fc20c4fca6bf4634cb12ccb5840f9" name="libglue-devel" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="50e4c616c4943af98bcefa92c052e1b9930979f8b0bb2bd9e07bf60a9156f318" name="libglue-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="95bc5a4167989f897fe7ca61358dc47ecc36377d1bd44b1aa4a6bf220c3bb60e" name="libglue2" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="93d6c7c4b284037048b6639624edf9e892beae3143cde12498c55dc7176d08e6" name="libglue2" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="7b361710073c940a4a32f9245c6c529f68dcd50dcfe9391e991a7abbe31e1c9f" name="libglue2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="978b8d2f62fca871c1ae66a146c18d05b002d197c2a763c45e8b3aa8b46c5aae" name="libgnutls-dane-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="f520d01ce0170814db06df6dc5eeb772effd70920a05962f6329a4d7ef780f92" name="libgnutls-dane-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="1ded57297807e51066b990427f7fd3af614e834912b89c6035b431a547200a99" name="libgnutls-dane0" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b6f2e852b45c656e1f66f74c7231c0940c0e74f6cd1037d632ba840098ae9ea9" name="libgnutls-dane0" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c7ec8bf925d8fd5ea63c7bc2f5480899d28c60cd068cac5717f1d5a02031af74" name="libgnutls-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="000d111e0d4c45bd3caf2ba29bdb3a12aebafd06966390c8445c26031d9b7b77" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="0fc756a87395bbe27760beb58d860c6c6bb031ffe441a5aad5ec9fff04db1e11" name="libgnutls-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="106c5ee697ab85050704944ac961b973820609a16381823458c0289619dd8007" name="libgnutls30" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="1e6ded85311c18709d0a8a2c144dbdf96fac05f2783045e6d3e0271ee82732f9" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="61d3d080b0103d24978ce49488f66c659ea5da896e1ca4fef65de98044c7401a" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c97a063603006c05393c1e78a38cb8c57241ad7f8f502378c32d59539b400bda" name="libgnutlsxx-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c02b208cabf5e3d0f514e5dc7572314a942e05e03ce1fdcba0b2ba9666995884" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b03aa880936b1d046f75c9c56f89d51b65de5c0d299c7e993f2667ba356e6d11" name="libgnutlsxx28" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="e0a590287409bf5b83363422b8facd7f7a951338eec3971a41cf0738b644f39f" name="libgnutlsxx28" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="42630b38d76eb16e7574f1bf32377ba7b6e002d9521009ab2fd2bbe08bbafeb0" name="libgo11-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="d7ab864628959b6e9685ed7d207e991a4cbb8078f60226a026fa1387694012b4" name="libgo11-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="c8f7ae45f10b201db8e785c51cdf975e512434c33ad9d8ca1d625556d9d871be" name="libgo11" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="31548bf74658eb3378fa0bbbad87d53bb8935a9ac7f48e007949c37d11468581" name="libgo11" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="e9aeeadb9a6ce02ea249ee7a6902fc329c022ad5b5a6903796f1e380782c346f" name="libgo11" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="31d72d3ef8dda3f4fcc20dcc9ea715e123d562e59e8a8c0ebc66a4ae2fb85902" name="libgo11" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="79c67fc860e3f838b419221b3f227ddf3d28c832ab298690731596aa223f92cc" name="libgpiod" arch="src">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="00461d4dbd4cbea56629aaf0f4c45c4fe6a3133c36a048de470cc439335d4ebf" name="libgpiod" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="b2d54c63e01281de6c40e0bda96525b76044d810c424012aa7634695f17d0098" name="libgpiod-devel" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="40a008df4b614ebfa02dd47d6fe9d9ec7451f4a3a47837a40d52167315ab96c3" name="libgpiod2" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="57272a61849200e99bc391c900405f9d7d1cf60e29baa4528182ad342d7e4767" name="libgpiodcxx1" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="b45058754e80a5e51c759ea6d1b975fba0cf1f35540941832f04169da5f10ffc" name="libgraphviz6" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="c36474444df2db6043e288880b80eb28887b5ab0a4a34c165b6f6874d25a4a0b" name="libgraphviz6" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="60d77d64a04f6a8c47b5448112ab5d18ccf2ebd64b56a6534da4ef31eb097fa9" name="libgroupsock8" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="60d317c0b9fc581d85f6dab739c53fdfe9a2381561377623bbb653be7fd0848d" name="libgtk-3-0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="92fc003ea570e45e129c7e2d68d92bdb944da68ddc33293d4b14014cda01cb64" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9363baeb48f6b19e7d226e0455dffbc71cf797d1d6080b3ae13c92accd3eb170" name="libgtk-3-0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ee30ce1fb702748cbc8bd011051e6db8bbc5913c7b075ac3c0df0878974c84d1" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="addaeef130044772f4a8987313b918305db0d737ee52b5370120663e2f16905b" name="libgtk-3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="42707dbf308bcb8f36e0ed2c5f5b118cb04f464573bc6982718b56ac54f1d935" name="libgtk-3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f511e17050b1b22ff86d287262ff2e1ee9f377f40aec77e575719e5274155912" name="libguestfs" arch="src">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="dc821a72b05ad3d8408d40cbe32346625f2e12b6489eda0cd1e3e01a1cc91756" name="libguestfs-devel" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="9351591e895e8dfe5bdeaaa9fd017e4104baaa24888446cb96191f02d4ce30f5" name="libguestfs-test" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="eec321c618e023a86732feef421cb8a03a95b94b3b4b3e2230b070081d2bb291" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="739c414575b3a8fbc1b91e2002a1ff1f6cf58719d10eaeefffb392d211218880" name="libheimdal" arch="src">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="db685cfc91e53853b1d9c7fe9419c272ba8e481861990254819c75037ee4a098" name="libheimdal" arch="x86_64">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="d8bfe732eb9014139f6744fefbe9ca31dc2c787bccc8e2ee1af1ebcbef0165ab" name="libheimdal-devel" arch="x86_64">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="649807d3aa77c4d966f029036d2346ff4896d173ab9664d07262372f702782bf" name="libibumad3" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="a3d6dcb29b97f106a6a18d6485b755c72bfd5f2c9a7cc84e2a2cf770de810e7f" name="libibumad3" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="65c45dcc87e07cff284d9f265d9799633793c0fd372cd3f13cff74f9f1c1c832" name="libibumad3-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="4706604d9fc9fee2fd9df968031b13d6628c9264d3eba36305d530dd079fa1c1" name="libibus-1_0-5" arch="i586">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="ff015a7ef12e430f7fa0474bef5043bcf35fef851b71c1265f072639d0f1c6f0" name="libibus-1_0-5" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="4f6fa898c172b57e633b5b41d3187c44846ad62843a2c5d7a52cbfea79d9a4fe" name="libibus-1_0-5-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.19" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Do not condition sources they all need to be present in src rpm
- Add conditionals for python2 and python3
- Use full url for github downloads instead of handmade tarball
- Use make_install macro
- Apply py3 enablement patches everywhere, no effect on py2 code
- Drop python3 split spec file as it is not needed and use only
  python3
  * As there are no dependent packages on python-ibus directly
    people should repoint their scripts to the python3 variant
  * Makefiles do not allow building both at once so stick only
    with py3 as we are disabling python2 slowly anyway
- Drop 12.2 KDE icons as the codestreams are long out of support
- Drop the kde4 icons too as we are plasma5 based now and enable
  appindicator integration for plasma5 conditionaly under KDE
  condition</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="hillwood@opensuse.org" date="1520337600">- Update version to 1.5.18
  * tools: Do not change keymaps with 'use-system-keyboard-layout'
  * src: Fix GVariant leaks (Carlos Garnacho)
  * src: Added some error handlings from a code review
  * src: Add libgobject.so to LDADD for Debian libtool (Danny)
  * src: Reintroduce the hex mode keybind with an environment variable (Aaron Muir Hamilton)
  * ui/gtk3: Translate input method name in ibus (Peng Wu)
  * Added DBus filtering against malware
  * Implement Unicode choice on Emojier
  * Implement ibus-extension-gtk3 for the global keybinding
  * Disable panel extension for 'gdm' and 'liveuser' user
  * ui/gtk3: Set title string in gnome-shell
  * Add ISSUE_TEMPLATE
  * Updated translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1524139200">- Fix filelist for SLE.</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Trim filler wording from descriptions.
- Update Summaries and RPM groups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527854400">- Replace python3-gobject2-devel and python3-gobject2 with
  python3-gobject-devel and python3-gobject BuildRequires and
  Requires.
- Drop gconf2-devel BuildRequires: No longer needed, nor used.</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not hardcode python in 3.6 version, they change so use wildcards</changelog>
  <changelog author="Fuminobu Takeyama &lt;ftake@geeko.jp&gt;" date="1536062400">- Upstream update to 1.5.19
  * IBUS_DISCARD_PASSWORD variable for the workaround of the
    password popup problem in Firefox and Chrome under GNOME X11
  * Emoji feature improvements:
    Move input focus on Emojier to engines' preedit
    Show previous emojis with "history" annotation
    Add num pad Enter, Down, Up, Left, Right on Emojier
    Fix SEGV in IBusEngine if no emoji shortcut keyis
  * Compose key feature:
    Enable preedit for compose keys
  * Bug fixes and code improvements
- Drop ibus-force-python3.patch
  * merged by upstream
- Remove ibus-python3
  * Upstream will not maintain it for Python 3 anymore
  * Drop ibus-python3-migration.patch</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="cc14125e11fe1f35dd482d0be6fddee6d5fa6d8acc04cde05be6eafcb93396b1" name="libibverbs" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="b43122901a0b2f419101621baeb7cdffe6e40f0336b62fbf691c1e59f8725710" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2852bc0003ad510e4f78e87c47044272622312001ee396029fe7656bdbbfc38d" name="libibverbs-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="a3efc98c9530fb2c7b7865e6f464640a8528b2759b230c796a977ea94eb57ca6" name="libibverbs-utils" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2f0a819252e9bfe3f447a9c892b0338935e6fbeec546db483ceb130edb45911e" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="fec9b02161f5c308e2fcca35ba7c2f32d96c7b61acc1051e740f459b366e13eb" name="libibverbs1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="de181cc6c8bab8e8c1cdcafdebeca2862352a2c29182fe6434b27ddc64553772" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="892b17f55c94b2a6d697d89cf42aa599e2722ef41d52f2e0e11904214d406f10" name="libibverbs1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2fe9e66ee6ea8e1b2bd7164fee2abf3b7682c531f5ab21ee4ab1194e927ff7c3" name="libidn2-0" arch="i586">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="b2ec3410a3953d7a522677cbb32ee57487554904667fe572fca0e4a44a309632" name="libidn2-0" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="f0964f645d55bc8c032e82c5d3200dc6c7fe4f2297603d49d54e7ed8e729eb14" name="libidn2-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="404de79b96c0a01f4136490de9bce4b4e13cef2ad574221fc28bada8e233c050" name="libidn2" arch="src">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
  <changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="2a946f832a35d00e34fc57ed35710cd397df641287cfa88ce2850eccc40b0467" name="libidn2-devel" arch="i586">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="bac4415621ee7e3ff8aac9c3a5415e4e81c11c60702cadc15d89213b20583120" name="libidn2-devel" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="9e19e1a1e519762c402b3ca3b0c6795cd9b4389d41d7d23444d103ec22ef81cf" name="libidn2-lang" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="e08eac04f7426a744196b4398c31d3ede03e85aac72cd0905422d7b714170c56" name="libidn2-tools" arch="i586">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="35d629ac24bfceb4d89ddf3464193bf4cc3968126810fd97a66ed9f0d34fd829" name="libidn2-tools" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
  <changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
</package>
<package pkgid="1b0d45df2ea2485ed3e11466c1eef8ca3e31a32dafc3b161bb3f124725b95918" name="libimobiledevice" arch="src">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="opensuse@sukimashita.com" date="1333972800">- Update to 1.1.4:
  - Fix a bug in idevicesyslog causing the connection to close after timeout
  - Bump soname revision
  - Bump libusbmuxd dependency to 1.0.8
  - Fix reading from syslog_relay and remove null characters
  - Relicense ideviceimagemounter and idevicescreenshot to LGPL
  - Fix a crash when using restored_client_free()
  - API: Add sbservices_get_interface_orientation()
  - Update man pages and code comments for documentation
  - Minor cleanup
  - Add Python bindings generated by Cython
  - Bump libplist requirement to latest 1.8
  - Add support for OpenSSL with fallback to GNUTLS
  - Improvements and various fixes for Win32 and OS X build
  - Remove glib dependency
  - Improve restored implementation
  - Fix various memory leaks
  - Fix support for iOS 5 and later
- Remove swig patch as bindings have been removed
- Remove gstatbuf patch as it is obselete now</changelog>
  <changelog author="opensuse@sukimashita.com" date="1333972801">- Allow compilation on 11.4 by disabling cython bindings</changelog>
  <changelog author="dimstar@opensuse.org" date="1340193600">- Add libimobiledevice-cython1.16-detection.patch: Fix build with
  Cython 1.16.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341835200">- Fix segfault without $XDG_CONFIG_HOME and $HOME set
  (bnc#768537, libiphone#273).</changelog>
  <changelog author="dimstar@opensuse.org" date="1358510400">- Disable python bindings (using with_python defines):
  python-cython 0.17 became even stricter and the bindings
  currently don't build, but they are also not used by anything at
  this moment (bnc#796133).</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 1.1.5:
  + An improved idevicebackup2 tool.
  + Various new tools.
  + Better cross-platform building.
  + Crash fixes.
  + iOS 6+ compatibility fixes.
  + An important API change related to service lifecycle
    management.
- Drop libimobiledevice-cython1.16-detection.patch: fixed upstream.
- Drop libimobiledevice-segfault-fix.patch: fixed upstream.
- Change _lname defines to libimobiledevice4, following upstreams
  soname change.
- Update baselibs.conf to follow the soname change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1374321600">- Mark docs/html as %doc, not %docdir: docdir only 'flags' a
  directory to contain documentation, but does not actuall ADD the
  documentation, which is clearly not the intent here.
  Additionally, RPM 4.11 no longer allows %docdir to be used on
  relative paths (as it's meant to flag directories in $DESTDIR).</changelog>
  <changelog author="i@marguerite.su" date="1402920000">- Update to version 1.1.6
  * Remove segmentation code from afc_file_read() to provide raw interface and
    more control to API consumer I/O logic
  * Implement global thread safe library initialization, especially to control
    SSL backend lifecycle
  * Major refactoring of pair record code and logic to use new usbmuxd pair
    record management interface
  * Replace user level with system wide pair record file handling
  * Bump dependency to libplist 1.11 and remove use of "plist_dict_insert_item"
  * Bump dependency to libusbmuxd 1.0.9
  * Finish pair record and trust dialog handling for iOS 7+
  * Improve AFC write performance and memory usage
  * Add support for custom output filename to idevicescreenshot
  * Fix detection and compilation for Python 3.x
  * API: Added file_relay_request_sources_timeout()
  * Fix broken HouseArrestClient class in cython bindings
  * Add new idevicecrashreport tool to retrieve crash reports and logs from a
    device
  * Prevent "Failed to restart/shutdown device" messages in idevicediagnostics
  * Link against ws2_32.dll on Win32
  * Add support for iOS 7+ disk image mounting to ideviceimagemounter
  * Add new idevicename tool to get or set the device name
  * Allow unbacking of encrypted backups with a given password to idevicebackup2
  * Remove sending "Goodbye" request on lockdown
  * Add support for newer PLIST_REAL based time type to idevicedate
  * Add note about setting time not working on iOS 6+ to idevicedate
  * Handle partial SSL reads correctly now to prevent random crashes
  * Fix duplicated output in ideviceinfo output
  * Remove a bunch of dead code
  * Fix deprecated OpenSSL "RSA_generate_key" with "RSA_generate_key_ex" which
    is available since OpenSSL 0.9.8 (July 2005)
  * Improve debug messages
  * Enforce "-fsigned-char" to fix issues on embedded platforms
  * Fix compilation with Clang/LLVM
  * Avoid versioning for shared library on Win32
  * Add experimental support for controlling cloud backup mode to idevicebackup2
  * Save EscrowBag when starting service for automatic unlocking in pair record
  * Remove pairing logic which is obsoleted by usbmuxd's preflight handler
  * Fix shutdown of SSL connection to be correct and no longer generate errors
    on device
  * Add support for GnuTLS 3.x and fix broken GnuTLS backend
  * Add extensions to generated certificates to match native ones
  * Add "systembuid" command to idevicepair
  * Allow starting service without the need for a running SSL session
  * Refactor more code into common module
  * Add option to filerelaytest to specify a source to request
  * Fix support for partial messages in webinspector implementation
  * Implement support for encrypted backups in idevicebackup2
  * API: Export SSL control functions for idevice_connection_t
  * API: Make generic service client public to allow external service
    implementations
  * Implement *_start_service() helper for easier creation of service clients
  * Add public *_SERVICE_NAME defines for each service
  * Fix a great bunch of memory leaks after intensive valigrind session
  * Security: Fix insecure use of the /tmp directory (CVE-2013-2142)
  * A bunch of memory leak fixes
  * Python: Various fixes and support for "with" statement for AfcFile class
  * Python: Add Afc2Client class to allow jailbroken filesystem access
  * Fix linking issue with newer libtool as reported for Ubuntu
  * Fix stuck thread in idevicesyslog which broke quit from within the tool
  * Add syslog_relay service implementation and use it in idevicesyslog
  * API: Add instproxy_client_get_path_for_bundle_identifier() helper
  * API: Add afc_dictionary_free() helper
  * Move thread, socket, debug and userpref code to "common" source directory
    in order to improve code reuse
  * Fix broken byte order detection in configure.ac which could lead to broken
    AFC protocol communication on platforms without endian.h (Raspberry PI)</changelog>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="9d1b1a7d57167438e49c7fc6e2b482f8b3c4dc688b4b4f8ab069036679f3db26" name="libimobiledevice-devel" arch="i586">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="e68ef8229eafd1327561a0a8f0460b85a83076d92dfd04798231a6658f6afe2d" name="libimobiledevice-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="079d8d0ae853dd14684dbcc3ea7656b451ab561804be0478e129d3e5923b1c3e" name="libimobiledevice6" arch="i586">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="e9d461be0c42dd24c7e20603092ced909f3de0e787e9fce8da9da1bc4629cf24" name="libimobiledevice6" arch="x86_64">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="c367a0f54cf750ad2497eaf6d197c6b22e2bf349ffafe6140abd7f918e897246" name="libimobiledevice6-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp151.3.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="2b33a2a627d7a739a7202ba061f5ba256bbc69ae64fa609b05ffc16982b79c9f" name="libipa_hbac-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="5aa3f4dff228d1996451d8241f3c12a140603e2ab37caeb9df6eafb03d69dbf8" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="6e815b28d7831b65188b55d83788fce01a1190fed362d5537a22a353a09b84f9" name="libipa_hbac-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="8430f8180538726fbfc244031c6cd8848c6230b2ba41b35429138bbb49f38b91" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="c5f6499b3941a0431e6c638a3e165defe3479eeace25bb37354f13c0ba09d9c1" name="libipa_hbac-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="586cf0e54bb31a3c185859c039a549abef00af4d6e3d98e8800ce50101d05319" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="cf9fdcb657944a05db411e8509c04f58062bdd10e437f304a284e05558d11c13" name="libipa_hbac0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="f82dece5228c02679165b304b4766600571be044929b9f91997bc6f079d8120c" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d7489783cb434e99d5a728f81030e8649220b83d41197bbc980a06726f71e304" name="libipa_hbac0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="c5643898bae4af7807e94b5f9de4d4ce92d3a2dc3477a6a2133124dbcf0c2849" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="5193956b426937a3ccc171fe73387f09ba55eecbb329f412165c2d31e3935237" name="libipa_hbac0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="4d7b4c144e6e5e06e62dc13d46e2380aadd3b88b5f2cf801fe557a94620e001a" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="859370dbd2b4228095577a6f654ea8c9b8223e010c51b670f1097182a55a5fca" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4ca90dd77ba66b1c36283355a4963712166e51e2b36759047bcdf210c1339666" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="e25668b0cc52ba282faffc26e4ac777053b3a04c7a8f8bf341d1a60d3810bbcc" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="c6b6a2c19e1f99b77db9e2549681ad6cac6bf9412404ade05e67fb89f65ac0d1" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="9bba6b61a82d7ee0287685f65c6315f7f95a213731dcb1d9f098ff34f4779f2f" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="b69ff532a356601587807abfad365c04ddfa4817c0a2883854ade1222db87d64" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="fbc8aa1156081d32f761e2d603d7bca9045774c411ab26df63dfcac5d82a709a" name="libirs160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="a9cdb8d058c8eb9aa339bf4cf4a7796280cb42c85699b0af3660f5745a3a2c9e" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="6848c9bb9f2bf3fb2e9b0513867abcdc4e9bc8bb541fb18e28c58e3345623e68" name="libirs160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="08d6faa7531135756a70f1558319c19d4736a31d1fd925b46e55d548f834829c" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="d22918c6fff3c7b5ddc3c6cdfb9c09402a12223cbad66ecaa04234429e116e6d" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="81abb07a6004bf982bf990b6e7d1525e69c0901e367ce3f46efaf6fcac8b9796" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="a8b8babbe0f88ac089fda4b39d0c3f7ae27e62634fe89970404d06518eb2cdbb" name="libisc166" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="47c0a1e4751c45f494e081ca41d9357de84bdde59dc4f8a26d4a7c1682e8e10f" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ee80fe99b0ab33786caa93c8eaeb53e650d98338e32c712497c5575a74c1d7ed" name="libisc166" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="03d90d2d79a784e71a37e48546e025f70556ece5d7b002417044b339198d6c0d" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="84c48a3e5eebae0cb9537f397fc4d07c45e0e2f1ccfb58b4ec49507d7e670296" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="638d4ce79d8a2030c4a4857d3cc6e9415092d5dc94f50264825f2a6ecb1c972a" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="c788b7b9542b7e5f2f3da32bb000e0846c0e1316ad22eb54a82c302d51342c10" name="libisccc160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="5115a2798131d00c4d936bae30558eec3b3b86d8fb94dff27681586f3f853687" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8bdf3a6bd0bd2a0cb07a0125ca7bc5be4fab262aaf1dc6d5abd756b9f9efd823" name="libisccc160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="9a53c8b481b5031067c063f75b1537b252259ca5bcba491d222164287e034390" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="d8de9ad8d1155ba7117823b080664f0856ce72d273ce8a3e05031781467330be" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="5713a7f949b1cb7d3f6a1cb7329d7beb7edaa6fc09454398c8dcb919ac101b45" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="7e74bb20ee3cfc033f86683a431076df55df577c081e58de862faf4ab8a135b8" name="libisccfg160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="486431d9cbdc5c7349e4bf215df8760bfd7f287b69dbda903a1c6108bd4fcfa2" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="c06dccce1c540c722f8aefb25d188e644834061d37ad1f03356f3d964a33c733" name="libisccfg160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="0aa698554663153cf3489e8585c9e4679c81857e41b4ae63737cf236db22f5d5" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="07160aca0b2d5a7ea017655b759568872e5821abd1d556326548760996f046fa" name="libiso9660-10" arch="i586">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="d152bbd88d687e616ed0b6e89c035b79165039c04d69eb648516f91439177a25" name="libiso9660-10" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="f5491771f6d945bd2f1cc468691bde151d87496576cea6edb3c607295ce1f9bc" name="libiso9660-10-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1563278400">- Add libcdio-LE-BE-sizemismatch.patch: Fix warning when BigEndian
  and LittleEndian sizes do not match. Use LE as authorative
  information (workaround for boo#1094761).
- Add libcdio-more-relaxed-from_733.patch: Switch to using the more
  relaxed from_733 in _iso9660_dir_to_statbuf: Done so that libcdio
  doesn't bail out when processing non-compliant ISOs such as
  openSUSE ISO files.</changelog>
</package>
<package pkgid="440ed105248df1a0d0d7065d762a36797c4633f04dd840d0d5afa095259834f3" name="libixion" arch="src">
  <version epoch="0" ver="0.14.1" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1364299200">- Fix boost m4 macro to pass configure stage.</changelog>
  <changelog author="tchvatal@suse.com" date="1364299201">- Beautify a bit.</changelog>
  <changelog author="jengelh@inai.de" date="1364299202">- Fix wrong order of patch application and broken sed substitution
  in %prep stage
- Runtime boost dependency is automatic and not needed</changelog>
  <changelog author="tchvatal@suse.com" date="1364299203">- Cleanup a bit more for factory inclusion.</changelog>
  <changelog author="kyoshida@suse.com" date="1364385600">- Updated the package which includes the boost patch and several
  others.
- Removed distro-specific patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add URL path for the download.
- Update the package to be matching the released tarball.
- Do not force autoreconf as it is not really needed with released
  package.</changelog>
  <changelog author="cfarrell@suse.com" date="1368619200">- license update: MIT
  The SPDX shortname for the license described in the COPYING file is MIT</changelog>
  <changelog author="tchvatal@suse.com" date="1390737600">- Cleanup with spec-cleaner and make the outputs verbose.</changelog>
  <changelog author="fstrba@suse.com" date="1401105600">- Upgrade to upstream version 0.7.0
  * needed by libreoffice 4.3.x
- Add pkgconfig(mdds) dependency instead of mdds-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.9.0:
  * Needed for new orcus
  * Python bindings are around now
- Update homepage
- Add python subpackage
- Tests fail with this release, next one will fix it again</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Drop copy&amp;pasto from fedora</changelog>
  <changelog author="tchvatal@suse.com" date="1428926400">- Version bump to 0.9.1:
  * various triv bugfixes
  * Build with tests and work this time</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Switch to mdds-1.0
  * Various fixes
  * Python3 bindings obsoleted python2 ones</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 0.11.1:
  * Switch to mdds-1.2
  * Few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1:
  * Update to be in sync with orcus
  * Small fixes around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.13.0:
  * Step lock update with orcus
  * Various fixes / fuzzer crashes resolved</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Rename python3 package to match up naming conventions
- Install license file</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Update to 0.14.1:
  * Update for new orcus
  * Various 23bit build issues
  * Various coverity fixes</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="622e1b2abc1c2c525b8d5d975fe3aa8d7cee86e8cfebd6efdcc579d446f8267a" name="libixion-0_14-0" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.9.0:
  * Needed for new orcus
  * Python bindings are around now
- Update homepage
- Add python subpackage
- Tests fail with this release, next one will fix it again</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Drop copy&amp;pasto from fedora</changelog>
  <changelog author="tchvatal@suse.com" date="1428926400">- Version bump to 0.9.1:
  * various triv bugfixes
  * Build with tests and work this time</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Switch to mdds-1.0
  * Various fixes
  * Python3 bindings obsoleted python2 ones</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 0.11.1:
  * Switch to mdds-1.2
  * Few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1:
  * Update to be in sync with orcus
  * Small fixes around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.13.0:
  * Step lock update with orcus
  * Various fixes / fuzzer crashes resolved</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Rename python3 package to match up naming conventions
- Install license file</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Update to 0.14.1:
  * Update for new orcus
  * Various 23bit build issues
  * Various coverity fixes</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="207061732f3fa13b3c156d37c62c7a5ac9a6db3f5def192eee3196686e4d0718" name="libixion-devel" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.9.0:
  * Needed for new orcus
  * Python bindings are around now
- Update homepage
- Add python subpackage
- Tests fail with this release, next one will fix it again</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Drop copy&amp;pasto from fedora</changelog>
  <changelog author="tchvatal@suse.com" date="1428926400">- Version bump to 0.9.1:
  * various triv bugfixes
  * Build with tests and work this time</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Switch to mdds-1.0
  * Various fixes
  * Python3 bindings obsoleted python2 ones</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 0.11.1:
  * Switch to mdds-1.2
  * Few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1:
  * Update to be in sync with orcus
  * Small fixes around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.13.0:
  * Step lock update with orcus
  * Various fixes / fuzzer crashes resolved</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Rename python3 package to match up naming conventions
- Install license file</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Update to 0.14.1:
  * Update for new orcus
  * Various 23bit build issues
  * Various coverity fixes</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="087c90b72471422ce13a5907f4f9eafc1d6aeadd6ffb3a8e188f83145050ded8" name="libixion-tools" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.9.0:
  * Needed for new orcus
  * Python bindings are around now
- Update homepage
- Add python subpackage
- Tests fail with this release, next one will fix it again</changelog>
  <changelog author="tchvatal@suse.com" date="1427198401">- Drop copy&amp;pasto from fedora</changelog>
  <changelog author="tchvatal@suse.com" date="1428926400">- Version bump to 0.9.1:
  * various triv bugfixes
  * Build with tests and work this time</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Switch to mdds-1.0
  * Various fixes
  * Python3 bindings obsoleted python2 ones</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 0.11.1:
  * Switch to mdds-1.2
  * Few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1:
  * Update to be in sync with orcus
  * Small fixes around</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Version update to 0.13.0:
  * Step lock update with orcus
  * Various fixes / fuzzer crashes resolved</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Rename python3 package to match up naming conventions
- Install license file</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Update to 0.14.1:
  * Update for new orcus
  * Various 23bit build issues
  * Various coverity fixes</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="ff650688cbe2b9f29dedef3cf62344b44f88e80592565b775006810233e98fd3" name="libjack-devel" arch="i586">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="9b9c3089910381ee1d21373037fe49af122833c63a93d9580cd928b27b74229b" name="libjack-devel" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="84de6398f52c55233dc405c9f234929116ae4ebaa38aaf0295b6808e16fd4a12" name="libjack-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="9dd87d5d73f8973880725cea675f1db5276d947d1b1eb4a3008b8031dd37aac3" name="libjack0" arch="i586">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="9b347eb9da7148b23bfc873228a865ddfcfcffd708a4929d1357000722f3afd0" name="libjack0" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="2d0ea439ff99ae3101cd03902441e35e3e11516db0361e680431faa3c2251eaf" name="libjack0-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="af7cda0efb3c7f5a4ce1ab9fdba9008ca34c30861ef365a07a0c4017d6430c80" name="libjacknet0" arch="i586">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="e316c66b679bae80cc15179d300a0a988e718798e195e8821415b8d4f6757214" name="libjacknet0" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="7e31cabed83c93f27cdc36d0f2dd52048fa705faec1a382ba235b56df416370b" name="libjacknet0-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="d2775639a32a6ee72e53a1a1792b54bdf87818379efec1e65d2a609a73616d91" name="libjackserver0" arch="i586">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="c6c8b0e2e228b18a970c6105634bc40e04ebebf3b5595cd2f4dbf9fbb21db23c" name="libjackserver0" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="e64ced3d33f10aa8974e7babf43dc35b593f0fa25642dfa95eccef2790655bfb" name="libjackserver0-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425729600">- Replace celt with opus
  * remove jack-celt-build-fix.diff</changelog>
  <changelog author="plinnell@opensuse.org" date="1432555200">- Enable 32bit build in baselibs.conf</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Added libjack-devel to baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1458302400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="davejplater@gmail.com" date="1458475200">- Use pkgconfig buildrequires and cleanup spec.
- BuildIgnore libiec61883 to allow Leap42 and earlier build again.</changelog>
  <changelog author="tiwai@suse.de" date="1460721600">- Fix the build failure with gcc6:
  gcc6-fixes.diff</changelog>
  <changelog author="davejplater@gmail.com" date="1491134400">- Fix gcc7 build failure with jack-fixgcc7.patch, sent to github
  jack2 issue#253</changelog>
  <changelog author="davejplater@gmail.com" date="1500465600">- Modify jack-fixgcc7.patch in line with upstream.</changelog>
  <changelog author="davejplater@gmail.com" date="1515067200">- Update to version 1.9.12 and use python3 instead of python2 for
  the build.
- Removed jack-sparcv9.diff and jack-ppc64-long.patch, the file
  that is patched - linux/cycles.h no longer exists.
- Removed reproducible.patch, gcc6-fixes.diff and jack-fixgcc7.patch
  they are all now upstream.
- Upstream changes:
  * Various corrections in NetJack2 code.
  * Partial buffers can now be transmitted with libjacknet API.
  * Including S24_LE/BE formats to linux ALSA driver.
  * More robust shared memory allocator.
  * Correct CoreAudio devices aggregation code.
  * Waf and wscripts improvement and update.
  * New JackProxyDriver.
  * Various fixes in JACK MIDI code.
  * Fix return value of SetTimebaseCallback().
  * Correct netmanager latency reporting.
  * Implement new jack_port_rename and JackPortRenameCallback API.
  * Fix CPU hogging of the midi_thread().
  * Release audio devices when alsa_driver_new fails.
  * String management fix.
  * Correct JackDriver::Open : call to fGraphManager-&gt;SetBufferSize
  has to use current fEngineControl-&gt;fBufferSize value.
  * Use ARM neon intrinsics for AudioBufferMixdown.
  * Fix Netjack alignment.
  * Various wscript improvements and cleanup.
  * Fix initialization of several class variables.
  * Heap-allocate client matrix in topo sort.
  * Add a toggle command to transport utility, to allow toggling
  between play and stop state.
  * Avoid side effects from parsing of "version" option in jackd.
  * Allow firewire device be selected via -d.
  * Add ARM-NEON acceleration for all non-dithering sample
  conversion functions.
  * Add jack_simdtest utility.
  * Use Linux futex as JackSynchro.
  * Add autoclose option to jack_load.
  * Fix build with gcc-7.
  * Show hint when DBus device reservation fails.
  * Add support for internal session files.</changelog>
  <changelog author="davejplater@gmail.com" date="1515153600">- Split off libjacknet0 and libjackserver0 into subpackages.</changelog>
  <changelog author="davejplater@gmail.com" date="1515326400">- Build with _smp_mflags</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Update the waf code to the 2.0 series in order to work under
  python3.7 taken from upstream git:
  * jack-waf2.patch</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1537272000">- Add upstream patch to fix return value check of mmap() (boo#1108981):
  fix-mmap-return-value-check.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1537444800">- Remove unnecessary requires for libjack0 and remove obsolete
  comments.
- Use %license on "COPYING"</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1555329600">- Added 0001-Make-jack_control-python2-3-compatible.patch from git
  to fix boo#1132458.</changelog>
</package>
<package pkgid="a3fb95a1501fdf16dfe512004d78a94c7baae96fbc9c700cddecf5a0a4e83f99" name="libjasper-devel" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="bace2342d167e10316d1aa2efb251266b7a73c97b8ce313f7983e7830ea64a4e" name="libjasper-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="2f9b9064cd84f39fe93fe28f1ace8cce6bd65a1bd6cd9b93ed4e6b3f5d8ebf71" name="libjasper4" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="1228331f25e21deb5c284e43a636fe33414287fb1a0e5b5d52f5531f64f333ac" name="libjasper4" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="e6a82f9f955fce06e954a0da018405f5588e903d7513261ed9c3ad5c944d2171" name="libjasper4-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp151.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="20c0dec5c46a7d80c56f542c49c33d99b451467e35d67cda7c0d428b6a580c4a" name="libjavascriptcoregtk-4_0-18" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="1fa5090165f98c85f16283b5fecab458439eb0e331283a75dfdb6a6ac71de70b" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="0bc4aa447e92a49c061d26a73ca06733a58942f9771896b77c61a3d175430e92" name="libjavascriptcoregtk-4_0-18" arch="i586">
  <version epoch="0" ver="2.24.4" rel="lp151.2.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
</package>
<package pkgid="0eb69385a499fb9735509159b0c1bdabfee8a758fafae380b819bc5515081db7" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.24.4" rel="lp151.2.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
</package>
<package pkgid="4218c4deacb80c4841b1324b05f7dc86569b530694137b67f1bc9bb86ff7b00e" name="libjavascriptcoregtk-4_0-18" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp151.2.9.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686, CVE-2019-8735.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690,
    CVE-2019-8726.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688, CVE-2019-8674, CVE-2019-8707,
    CVE-2019-8719, CVE-2019-8733, CVE-2019-8763, CVE-2019-8765,
    CVE-2019-8821, CVE-2019-8822.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166400">- Update to version 2.25.3:
  + Remove support for GTK2 NPAPI plugins.
  + Fix web view updates after swapping web process if accelerated
    compositing mode is forced.
  + Make kinetic scrolling work again.
  + Fix position of emoji chooser when page is scrolled.
  + Fix web process deadlock when scrolling twitter timeline which
    contains HLS videos.
  + Make navigation gesture use dark fallback background color
    color on dark themes.
  + Make Previous/Next gesture work in RTL mode.
  + Support cancelling touchscreen back/forward gesture.
  + Add user agent quirk to make github work in FreeBSD.
  + Fix content disappearing when using CSS transforms.
  + Fix some radio streams that could not be played.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.2:
  + Enable process switch on cross site navigation.
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Ensure web extensions directory is readable when sandbox is
    enabled.
  + Fix the executable name of WebDriver process, renamed by
    mistake in 2.25.1.
  + Enable hyperlink auditing setting by default.
  + Remove the option to build without using the redirected
    XComposite window.
  + Fix HLS streams being slow to start.
  + Make accessibility work when sandbox is enabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.1:
  + Add support for subprocess sandboxing.
  + Add API to get the web process unique identifier of a
    WebKitFrame.
  + Add WebKitWebPage::did-associate-form-controls-for-frame signal
    and deprecate did-associate-form-controls.
  + Implement AtkComponentIface scroll_to methods.
  + Improve rendering of form controls when GTK theme is dark and
    enable prefers-color-scheme media query.
  + Show the emoji chooser popover for editable content.
  + Fix touch capabilities detection for websites checking touch
    events properties present in window or pointer media queries.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.
- Add pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires: New dependencies.
- Enable bubblewrap, xdg-dbus-proxy and pkgconfig(libseccomp)
  BuildRequires as well as bubblewrap and xdg-dbus-proxy Requires:
  Sandbox feature is enabled again.
- Drop conditional pkgconfig(gtk+-2.0) BuildRequires and
  webkit2gtk3-plugin-process-gtk2 sub-package, support for gtk2
  plugins are now dropped upstream. Add Obsoletes in libwebkit2gtk.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166401">- Update to version 2.25.4:
  + Switch to use libsoup WebSockets API.
  + Add support for permessage-deflate WebSocket extension.
  + Add support for datalist element in text input fields.
  + Fix a crash with empty video source.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166402">- Disable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and pass DUSE_WPE_RENDERER=OFF to cmake. Needs more
  work upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567512000">- Update to version 2.25.92:
  + Add WEBKIT_USE_SINGLE_WEB_PROCESS environment variable to force
    single process model in all WebKitWebContext. This is a
    temporary solution for applications still depending on the
    single process mode behavior. It will be only available in 2.26
    series.
  + Add new API to remove a filter from an user content manager
    given its identifier.
  + Add support for HSTS.
  + Several improvements and bug fixes in MSE media player.
  + Fix building without unified sources.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.26.0 (boo#1155321):
  + Add support for subprocess sandboxing.
  + Add support for HSTS (HTTP Strict Transport Security).
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Remove support for GTK2 NPAPI plugins.
  + Add support for datalist element in text input fields.
  + Show the emoji chooser popover for editable content.
  + Improve rendering of form controls when GTK theme is dark.
  + Fix rendering artifacts in youtube volume button and github
    comment box.
  + Single process model has been deprecated for security reasons.
  + Security fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769,
    CVE-2019-8771, CVE-2019-8710, CVE-2019-8743, CVE-2019-8764,
    CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568289600">- Test disable sandbox, does this fix epiphany?
  (pass -DENABLE_BUBBLEWRAP_SANDBOX=OFF to cmake).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568721600">- Enable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and stop passing DUSE_WPE_RENDERER=OFF to cmake.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Add webkit2gtk3-fdo-soname.patch: don't try to open WPE backend
  with an unversioned soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569240000">- Update to version 2.26.1:
  + Fix MSE media player with GStreamer 1.14.
  + Fix HTML alternate loads never finishing.
  + Fix web view initialization delay on fisrt load.
  + Validate user agent string set via API.
  + Fix a crash when a web view is destroyed with accelerated
    compositing mode enabled.
  + Fix EGL initialization with newer versions of Mesa.
  + Do not enable the sandbox inside docker.
  + Fix several crashes and rendering issues.
  ++ Security fixes: CVE-2019-8783, CVE-2019-8811, CVE-2019-8813,
    CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569499200">- Enable sandbox again (pass -DENABLE_BUBBLEWRAP_SANDBOX=ON to
  cmake).
- Move bubblewrap and xdg-dbus-proxy Requires from main package to
  main library package libwebkit2gtk-4_0-37, they are needed at
  runtime, and there is no webkit2gtk3 package that we can install.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 2.26.2 (boo#1156318):
  + Improve performance of querying system fallback fonts.
  + Don't use prgname in dbus-proxy socket path.
  + Fix thread-safety issues in image decoders.
  + Fix the build with WebDriver disabled.
  + Disable accelerated compositing when we fail to initialize the
    EGL dispaly under Wayland.
  + Fill the objects category in emoji picker.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8812, CVE-2019-8814.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1573128000">- Only use wpe and xdg-dbus-proxy/bubblewrap for TW and
  SLE-15-SP2 / leap 15.2.
- Don't pass -DENABLE_BUBBLEWRAP_SANDBOX=ON; it is on by default.
- Remove conditionals for EOL versions of openSUSE.
- Always build with python3; remove the conditional.</changelog>
</package>
<package pkgid="ebc9d7c5c32d6e7930732a8aab164991939cdfd044b161d525717ef92053e633" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp151.2.9.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686, CVE-2019-8735.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690,
    CVE-2019-8726.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688, CVE-2019-8674, CVE-2019-8707,
    CVE-2019-8719, CVE-2019-8733, CVE-2019-8763, CVE-2019-8765,
    CVE-2019-8821, CVE-2019-8822.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166400">- Update to version 2.25.3:
  + Remove support for GTK2 NPAPI plugins.
  + Fix web view updates after swapping web process if accelerated
    compositing mode is forced.
  + Make kinetic scrolling work again.
  + Fix position of emoji chooser when page is scrolled.
  + Fix web process deadlock when scrolling twitter timeline which
    contains HLS videos.
  + Make navigation gesture use dark fallback background color
    color on dark themes.
  + Make Previous/Next gesture work in RTL mode.
  + Support cancelling touchscreen back/forward gesture.
  + Add user agent quirk to make github work in FreeBSD.
  + Fix content disappearing when using CSS transforms.
  + Fix some radio streams that could not be played.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.2:
  + Enable process switch on cross site navigation.
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Ensure web extensions directory is readable when sandbox is
    enabled.
  + Fix the executable name of WebDriver process, renamed by
    mistake in 2.25.1.
  + Enable hyperlink auditing setting by default.
  + Remove the option to build without using the redirected
    XComposite window.
  + Fix HLS streams being slow to start.
  + Make accessibility work when sandbox is enabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.1:
  + Add support for subprocess sandboxing.
  + Add API to get the web process unique identifier of a
    WebKitFrame.
  + Add WebKitWebPage::did-associate-form-controls-for-frame signal
    and deprecate did-associate-form-controls.
  + Implement AtkComponentIface scroll_to methods.
  + Improve rendering of form controls when GTK theme is dark and
    enable prefers-color-scheme media query.
  + Show the emoji chooser popover for editable content.
  + Fix touch capabilities detection for websites checking touch
    events properties present in window or pointer media queries.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.
- Add pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires: New dependencies.
- Enable bubblewrap, xdg-dbus-proxy and pkgconfig(libseccomp)
  BuildRequires as well as bubblewrap and xdg-dbus-proxy Requires:
  Sandbox feature is enabled again.
- Drop conditional pkgconfig(gtk+-2.0) BuildRequires and
  webkit2gtk3-plugin-process-gtk2 sub-package, support for gtk2
  plugins are now dropped upstream. Add Obsoletes in libwebkit2gtk.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166401">- Update to version 2.25.4:
  + Switch to use libsoup WebSockets API.
  + Add support for permessage-deflate WebSocket extension.
  + Add support for datalist element in text input fields.
  + Fix a crash with empty video source.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166402">- Disable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and pass DUSE_WPE_RENDERER=OFF to cmake. Needs more
  work upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567512000">- Update to version 2.25.92:
  + Add WEBKIT_USE_SINGLE_WEB_PROCESS environment variable to force
    single process model in all WebKitWebContext. This is a
    temporary solution for applications still depending on the
    single process mode behavior. It will be only available in 2.26
    series.
  + Add new API to remove a filter from an user content manager
    given its identifier.
  + Add support for HSTS.
  + Several improvements and bug fixes in MSE media player.
  + Fix building without unified sources.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.26.0 (boo#1155321):
  + Add support for subprocess sandboxing.
  + Add support for HSTS (HTTP Strict Transport Security).
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Remove support for GTK2 NPAPI plugins.
  + Add support for datalist element in text input fields.
  + Show the emoji chooser popover for editable content.
  + Improve rendering of form controls when GTK theme is dark.
  + Fix rendering artifacts in youtube volume button and github
    comment box.
  + Single process model has been deprecated for security reasons.
  + Security fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769,
    CVE-2019-8771, CVE-2019-8710, CVE-2019-8743, CVE-2019-8764,
    CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568289600">- Test disable sandbox, does this fix epiphany?
  (pass -DENABLE_BUBBLEWRAP_SANDBOX=OFF to cmake).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568721600">- Enable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and stop passing DUSE_WPE_RENDERER=OFF to cmake.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Add webkit2gtk3-fdo-soname.patch: don't try to open WPE backend
  with an unversioned soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569240000">- Update to version 2.26.1:
  + Fix MSE media player with GStreamer 1.14.
  + Fix HTML alternate loads never finishing.
  + Fix web view initialization delay on fisrt load.
  + Validate user agent string set via API.
  + Fix a crash when a web view is destroyed with accelerated
    compositing mode enabled.
  + Fix EGL initialization with newer versions of Mesa.
  + Do not enable the sandbox inside docker.
  + Fix several crashes and rendering issues.
  ++ Security fixes: CVE-2019-8783, CVE-2019-8811, CVE-2019-8813,
    CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569499200">- Enable sandbox again (pass -DENABLE_BUBBLEWRAP_SANDBOX=ON to
  cmake).
- Move bubblewrap and xdg-dbus-proxy Requires from main package to
  main library package libwebkit2gtk-4_0-37, they are needed at
  runtime, and there is no webkit2gtk3 package that we can install.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 2.26.2 (boo#1156318):
  + Improve performance of querying system fallback fonts.
  + Don't use prgname in dbus-proxy socket path.
  + Fix thread-safety issues in image decoders.
  + Fix the build with WebDriver disabled.
  + Disable accelerated compositing when we fail to initialize the
    EGL dispaly under Wayland.
  + Fill the objects category in emoji picker.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8812, CVE-2019-8814.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1573128000">- Only use wpe and xdg-dbus-proxy/bubblewrap for TW and
  SLE-15-SP2 / leap 15.2.
- Don't pass -DENABLE_BUBBLEWRAP_SANDBOX=ON; it is on by default.
- Remove conditionals for EOL versions of openSUSE.
- Always build with python3; remove the conditional.</changelog>
</package>
<package pkgid="ab268aab9f5e6c0cc11ab83f54720c6cea50768478e05fded894e8658a321d20" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="a307876cdeb1f03bae6369d22e507502fa83a51c9558dfb537e0db846f99c322" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.4" rel="lp151.2.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
</package>
<package pkgid="8ee28516493b08ecac2fdefba196d7a06cdbb62272f122dc296af21e1af1c7e9" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp151.2.9.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615,
    CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679,
    CVE-2019-8686, CVE-2019-8735.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562068800">- Update to version 2.24.3:
  + Deprecate WebSQL APIs.
  + Make Previous/Next gesture work in RTL mode.
  + Fix content disappearing when using CSS transforms.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix HLS streams being slow to start.
  + Fix some radio streams that could not be played.
  + Fix the build with older versions of GStreamer.
  + Fix the build with video and audio disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676,
    CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690,
    CVE-2019-8726.
  + Updated translations.
- Drop upstream fixed patches:
  + webkit2gtk3-bug196440-build-fix.patch.
  + webkit2gtk3-bug198080-build-fix.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1562587200">- Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream.</changelog>
  <changelog author="Rich Coe &lt;rcoe@wi.rr.com&gt;" date="1563105600">- Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566993600">- Update to version 2.24.4 (boo#1148931):
  + Updated the user agent string to make happy certain websites
    which would claim that the browser being used was unsupported.
  + Improve loading of multimedia streams to avoid memory
    exhaustion due to excessive caching.
  + Fix display of documents with MIME type application/xml in the
    Web Inspector, when loaded using XmlHttpRequest.
  + Fix a hang while scrolling certain websites which include HLS
    video content (Twitter, for example).
  + Fix rounding artifacts in volume levels for media playback.
  + Fix several crashes and rendering issues.
  + Fix the build with video track support disabled.
  + Fix the build with OpenGL support disabled.
  + Fix build issue which would cause media controls to disappear
    when Python 3.x was used during the build process.
  + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658,
    CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683,
    CVE-2019-8684, CVE-2019-8688, CVE-2019-8674, CVE-2019-8707,
    CVE-2019-8719, CVE-2019-8733, CVE-2019-8763, CVE-2019-8765,
    CVE-2019-8821, CVE-2019-8822.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166400">- Update to version 2.25.3:
  + Remove support for GTK2 NPAPI plugins.
  + Fix web view updates after swapping web process if accelerated
    compositing mode is forced.
  + Make kinetic scrolling work again.
  + Fix position of emoji chooser when page is scrolled.
  + Fix web process deadlock when scrolling twitter timeline which
    contains HLS videos.
  + Make navigation gesture use dark fallback background color
    color on dark themes.
  + Make Previous/Next gesture work in RTL mode.
  + Support cancelling touchscreen back/forward gesture.
  + Add user agent quirk to make github work in FreeBSD.
  + Fix content disappearing when using CSS transforms.
  + Fix some radio streams that could not be played.
  + Fix video pause that sometimes caused to skip to finish.
  + Fix volume level changes when playing a video.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.2:
  + Enable process switch on cross site navigation.
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Fix rendering artifacts in youtube volume button.
  + Fix trapezoid artifact in github comment box.
  + Ensure web extensions directory is readable when sandbox is
    enabled.
  + Fix the executable name of WebDriver process, renamed by
    mistake in 2.25.1.
  + Enable hyperlink auditing setting by default.
  + Remove the option to build without using the redirected
    XComposite window.
  + Fix HLS streams being slow to start.
  + Make accessibility work when sandbox is enabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.25.1:
  + Add support for subprocess sandboxing.
  + Add API to get the web process unique identifier of a
    WebKitFrame.
  + Add WebKitWebPage::did-associate-form-controls-for-frame signal
    and deprecate did-associate-form-controls.
  + Implement AtkComponentIface scroll_to methods.
  + Improve rendering of form controls when GTK theme is dark and
    enable prefers-color-scheme media query.
  + Show the emoji chooser popover for editable content.
  + Fix touch capabilities detection for websites checking touch
    events properties present in window or pointer media queries.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream.
- Add pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires: New dependencies.
- Enable bubblewrap, xdg-dbus-proxy and pkgconfig(libseccomp)
  BuildRequires as well as bubblewrap and xdg-dbus-proxy Requires:
  Sandbox feature is enabled again.
- Drop conditional pkgconfig(gtk+-2.0) BuildRequires and
  webkit2gtk3-plugin-process-gtk2 sub-package, support for gtk2
  plugins are now dropped upstream. Add Obsoletes in libwebkit2gtk.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166401">- Update to version 2.25.4:
  + Switch to use libsoup WebSockets API.
  + Add support for permessage-deflate WebSocket extension.
  + Add support for datalist element in text input fields.
  + Fix a crash with empty video source.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166402">- Disable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and pass DUSE_WPE_RENDERER=OFF to cmake. Needs more
  work upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567512000">- Update to version 2.25.92:
  + Add WEBKIT_USE_SINGLE_WEB_PROCESS environment variable to force
    single process model in all WebKitWebContext. This is a
    temporary solution for applications still depending on the
    single process mode behavior. It will be only available in 2.26
    series.
  + Add new API to remove a filter from an user content manager
    given its identifier.
  + Add support for HSTS.
  + Several improvements and bug fixes in MSE media player.
  + Fix building without unified sources.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.26.0 (boo#1155321):
  + Add support for subprocess sandboxing.
  + Add support for HSTS (HTTP Strict Transport Security).
  + Use libwpe with fdo backend to implement accelerated
    compositing under wayland.
  + Remove support for GTK2 NPAPI plugins.
  + Add support for datalist element in text input fields.
  + Show the emoji chooser popover for editable content.
  + Improve rendering of form controls when GTK theme is dark.
  + Fix rendering artifacts in youtube volume button and github
    comment box.
  + Single process model has been deprecated for security reasons.
  + Security fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769,
    CVE-2019-8771, CVE-2019-8710, CVE-2019-8743, CVE-2019-8764,
    CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568289600">- Test disable sandbox, does this fix epiphany?
  (pass -DENABLE_BUBBLEWRAP_SANDBOX=OFF to cmake).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568721600">- Enable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0)
  BuildRequires and stop passing DUSE_WPE_RENDERER=OFF to cmake.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568894400">- Add webkit2gtk3-fdo-soname.patch: don't try to open WPE backend
  with an unversioned soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569240000">- Update to version 2.26.1:
  + Fix MSE media player with GStreamer 1.14.
  + Fix HTML alternate loads never finishing.
  + Fix web view initialization delay on fisrt load.
  + Validate user agent string set via API.
  + Fix a crash when a web view is destroyed with accelerated
    compositing mode enabled.
  + Fix EGL initialization with newer versions of Mesa.
  + Do not enable the sandbox inside docker.
  + Fix several crashes and rendering issues.
  ++ Security fixes: CVE-2019-8783, CVE-2019-8811, CVE-2019-8813,
    CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569499200">- Enable sandbox again (pass -DENABLE_BUBBLEWRAP_SANDBOX=ON to
  cmake).
- Move bubblewrap and xdg-dbus-proxy Requires from main package to
  main library package libwebkit2gtk-4_0-37, they are needed at
  runtime, and there is no webkit2gtk3 package that we can install.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 2.26.2 (boo#1156318):
  + Improve performance of querying system fallback fonts.
  + Don't use prgname in dbus-proxy socket path.
  + Fix thread-safety issues in image decoders.
  + Fix the build with WebDriver disabled.
  + Disable accelerated compositing when we fail to initialize the
    EGL dispaly under Wayland.
  + Fill the objects category in emoji picker.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8812, CVE-2019-8814.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1573128000">- Only use wpe and xdg-dbus-proxy/bubblewrap for TW and
  SLE-15-SP2 / leap 15.2.
- Don't pass -DENABLE_BUBBLEWRAP_SANDBOX=ON; it is on by default.
- Remove conditionals for EOL versions of openSUSE.
- Always build with python3; remove the conditional.</changelog>
</package>
<package pkgid="12575507d29533993676915a2cc9c7423e0360676c9a85c53d38681f5b2a5b93" name="libjpeg-turbo" arch="i586">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="912f92f7ddc0ba36d1625795687dedfde579f2ddede1f6a32586b4ef06f52980" name="libjpeg-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="299fffd32bd7c0809ef9a35a1bfa168fc3f790efaa02934d50a8303d576c7fe9" name="libjpeg-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="6c7607b0ec98e63cee3799e77b03c074b3ee164177b7eaaabaf37e9b25d8d223" name="libjpeg62-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="5a776f5190168b83b27f2e20d60d24a32b7219b5771c57755bb877ffe27fe375" name="libjpeg62" arch="i586">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="21ba829d410275c652f5cb3c0a65e724cf7e6ff12103db8b386c242adf79de13" name="libjpeg62" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="146f95386de6e5382c5ca3815d76e81acc9472ee46d70e0a073f846889364653" name="libjpeg62-devel-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="c92a8f3efde9d01c379b374f8cefa3698a6d45afc1b2755956ba4129a4bd059f" name="libjpeg62-devel" arch="i586">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="580f7ed9838a88fc0e4daf11ef00f352732db93f349dec569443bf67ad1a0652" name="libjpeg62-devel" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="c12da9f5a3cb683fcef6cf08e84a5aa8d56bef7ce76c51b7c6953ca68b9112a1" name="libjpeg62-turbo" arch="i586">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="40861c9d3e5fc1ae7dbefc272047e8cae1a91ec1c80da51820d11012857cad14" name="libjpeg62-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
  <changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
  <changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="71283b48a63a1f6d61a603f04bba7758b961da71d4c7c93a924d09647281a346" name="libjpeg62-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
</package>
<package pkgid="148f6acd691f1bd24680ba70947b032bed14f93ac597626cb9d5871df170de14" name="libjpeg8-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="af6c6c24c0d04548ac122c721235fbe6f25b728b3d0bee4137aaf536502d775b" name="libjpeg8" arch="i586">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="537ecf28c02b3382a965152849535afb5edab767aa763c3678c254663192f52f" name="libjpeg8" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="c4a07b9819c1b4353339f551133cc02368fcd3e9a1778adeb5f9ef78a9865ff4" name="libjpeg8-devel-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="a1b649a9f565781ff579a219cf8fb2d492f808df11f0f98e93b7be767973b33d" name="libjpeg8-devel" arch="i586">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="39c894e74d6e95c4d87f698fda4f10d8d3c0cb51128f3a76b89993334aff7a84" name="libjpeg8-devel" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="lp151.6.3.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
</package>
<package pkgid="60cad91b6099a8c54e6362fc574b5790f4c18f143df5ed4ed2171ec6edfe09e1" name="libkde4-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="12e1b37341a730338dde192ce9d94bebd1d70d57e2e9d18d184d1e738263e606" name="libkde4" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="3b959d481273b46f2821bdc30c3e99d64188b1adb3b7ddcc1801778cebc4ff0a" name="libkde4" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="3d4a548c1deb2718b2e062710a3c7a094595d702a428b1a2fd9363493e803624" name="libkde4-devel" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="4dbc9277e21e45930ab8362503180a7e04c1b8f8ab5ec0944aca5f0cb0404774" name="libkde4-devel" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="1761497e98f83f81d490618df8cb75c64f871525e54d6a76e2d059ce93d019a2" name="libkdecore4-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="539371db7931bd4e4ca9977e34330ee3e9ff0626ada319b89e7a058abbe5abdc" name="libkdecore4" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="fcd58d0c50edc537e5d73a8e2d41191f3b8bbb24ad01356b4e50c9ca223a2ffe" name="libkdecore4" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="9e137d66ca7edd30c71e112dba024e3cea235d32426352fcfdba95b8aed53d95" name="libkdecore4-devel" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="8ccc98cb21f79af4dd1315ea3c3963b1776d35df7324933f33053802bbfa0956" name="libkdecore4-devel" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="5f2602d758c873113b78db86398d1dbe07d7a575ba60351a506e5329745caea5" name="libkms-devel" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="6bfc3493bc8cb63c2e769d933617dcebb909c873f8f7c2182b2f06fd1206c873" name="libkms-devel" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="960d25ad27a94bc3b9718fbad020f8ddfcd163aa746c713f91d6ca717c076c9c" name="libkms-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="aa37e5d24c97afbb4d434b101c73046d1df9341acc5c62f3929784b4de8ffee3" name="libkms1" arch="i586">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="964bd80d6fd353bd768f87f624e41b356a1076b4b2b7ece1e743229be4564c60" name="libkms1" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="55e4311a96c5c79220752738495dbbb9aa5f952fb778ce07a36e5db39e3b7e01" name="libkms1-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.97" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove --with-pic which has no effect on shared-only builds.
  Rectify SRPM group.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507809600">- Update to version 2.4.84:
  + amdgpu: Add deadlock detection test suit.
  + amdgpu: make userptr unit test more interesting
  + amdgpu: Do not write beyond allocated memory when parsing ids
  + amdgpu: print error messages when amdgpu_device_initialize is failing
  + amdgpu: add sync_file import and export functions
  + amdgpu: add amdgpu_cs_syncobj_wait
  + amdgpu: add amdgpu_cs_fence_to_handle
  + Android: move libraries to /vendor
  + drm: add drmSyncobjWait wrapper
  + etnaviv: prevent deadlock in error path
  + freedreno/kgsl: fix pointer-to-int cast
  + headers: sync syncobj ioctl defines.
  + headers: sync DRM_MODE_ROTATE/REFLECT defines from kernel v4.14-rc1
  + intel: Change a KBL pci id to GT2 from GT1.5
  + include: sync drm.h and amdgpu_drm.h with airlied/drm-next
  + tests/amdgpu: add missing header to SOURCES
  + tests/amdgpu: add new uvd enc support check
  + tests/amdgpu: fix uvd enc data corruption issue</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 2.4.85:
  + Add const qualifier to arguments of drmModeAddFB2()
  + amdgpu: implement context priority for amdgpu_cs_ctx_create2 v3
  + amdgpu: add padding to the fence to handle ioctl
  + headers: Sync amdgpu_drm.h with drm-next
  + modetest: Decode IN_FORMATS plane blob property
  + modetest: Allow full testing of primary planes
- Fix changelog entry for version 2.4.84</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509537600">- Update to version 2.4.87:
  + amdgpu: fix 32-bit build
- This release includes the changes introduced with 2.4.86:
  + amdgpu: Add wrappers for AMDGPU_VM IOCTL.
  + amdgpu: Add VMID reservation per GPU context test.
  + drm: sync drm headers from drm-next.
  + drm/syncobj: fix some whitespace issues</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1509883200">- Update to version 2.4.88:
  + amdgpu: Fix wrappers for AMDGPU_VM IOCTL.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1513598400">- Update to version 2.4.89:
  libdrm release with leasing and syncobj api updates, updated amdgpu marketing
  ids, amdgpu tests, updated uapi headers &amp; etnaviv updates.</changelog>
  <changelog author="sndirsch@suse.com" date="1516017600">- U_intel-Add-more-Coffeelake-PCI-IDs.patch
  * Add more Coffeelake PCI IDs (request by Intel)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1518868800">- Update to version 2.4.90:
  + Add meson build system
  + always define HAVE_FREEDRENO_KGSL
  + always define HAVE_CAIRO
  + always define HAVE_VALGRIND
  + amdgpu: Update deadlock test to not assert on ECANCELED
  + amdgpu: Fix segfault in deadlock test.
  + amdgpu: fix 32bit VA manager max address
  + amdgpu: use the high VA range if possible v2
  + amdgpu: fix high VA mask
  + amdgpu: fix inefficient vamgr algorithm
  + amdgpu: clean up non list code path for vamgr v2
  + amdgpu: add amdgpu_query_sw_info for querying high bits of 32-bit address space
  + amdgpu: Don't print error message if parse_one_line returned -EAGAIN
  + amdgpu: Don't dereference device_handle after amdgpu_device_deinitialize
  + amdgpu: Symlink .editorconfig to tests/amdgpu
  + amdgpu: Disable deadlock test suite by default for SI ASICs
  + amdgpu: Disable VM test suite by default for SI ASICs
  + amdgpu: Add amdgpu_query_sw_info to amdgpu-symbol-check
  + amdgpu: fix not to add amdgpu.ids when building without amdgpu
  + android: Move gralloc handle struct to libdrm
  + android: Add version variable to gralloc_handle_t
  + android: Mark gralloc_handle_t magic variable as const
  + android: Remove member name from gralloc_handle_t
  + android: Change gralloc_handle_t members to be fixed width
  + autotools: Include meson.build files in tarball
  + configure: remove unused HAVE_CUNIT define
  + configure: remove unused HAVE_INSTALL_TESTS define
  + configure: always define HAVE_LIBDRM_ATOMIC_PRIMITIVES and HAVE_LIB_ATOMIC_OPS
  + drm: Fix 32-bit drmSyncobjWait.
  + exynos/tests: use #ifdef for never-defined token
  + fix return value for syncobj wait
  + freedreno: clamp priority based on # of rings
  + headers: sync up amdgpu_drm.h with drm-next
  + intel: Add more Coffeelake PCI IDs
  + meson: fix the install path of amdgpu.ids
  + meson: set proper pkg-config version for libdrm_freedreno
  + meson: set the minimum version correctly
  + meson: fix libdrm_nouveau pkgconfig include directories
  + meson: include headers in root directory in ext_libdrm
  + meson: cleanup whitespace
  + meson: add missing HAVE_RADEON
  + meson: sort HAVE_* defines
  + meson,configure: remove unused HAVE_OMAP define
  + meson,configure: remove unused HAVE_TEGRA define
  + meson,configure: remove unused HAVE_FREEDRENO define
  + meson,configure: remove unused HAVE_ETNAVIV define
  + meson,configure: always define HAVE_{INTEL,VMWGFX,NOUVEAU,EXYNOS,VC4,RADEON}
  + meson,configure: turn undefined preprocessor tokens warnings into errors
  + meson,configure: add warning when using undefined preprocessor tokens
  + modetest: Fix to check return value of asprintf()
  + remove unnecessary double-semicolon
  + README: Add note about meson
  + test/amdgpu: fix compiler warnings
  + tests/amdgpu: add bo eviction test
  + tests/amdgpu: add missing config.h include
  + tests/amdgpu: add parentheses to make operation priority explicit
  + tests/amdgpu: drop unused variables
  + tests/amdgpu: execute write linear on all the available rings
  + tests/amdgpu: execute const fill on all the available rings
  + tests/amdgpu: execute copy linear on all the available rings
  + tests/etnaviv: drop unused `return 0`
  + tests/util: fix signed/unsigned comparisons
  + tests/util: drop unused parameters
  + xf86drmHash: remove always-false #if guards
  + xf86atomic: fix -Wundef warning
- Remove upstreamed patch U_intel-Add-more-Coffeelake-PCI-IDs.patch</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214400">- Remove unneeded autotool dependencies</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214401">- Remove pthread-stubs dependency</changelog>
  <changelog author="emil.l.velikov@gmail.com" date="1519214402">- Remove unneeded defattr stanza</changelog>
  <changelog author="mimi.vx@gmail.com" date="1520337600">- update to 2.4.91
  + amdgpu: Fix mistake in initial hole size calculation.
  + amdgpu: mostly revert "use the high VA range if possible v2"
  + amdgpu: add AMDGPU_VA_RANGE_HIGH
  + amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"
  + freedreno: add interface to get buffer address
  + drm/fourcc: Fix fourcc_mod_code() definition
  + drm/tegra: Sanitize format modifiers</changelog>
  <changelog author="mimi.vx@gmail.com" date="1525953600">- update to 2.4.92
  + drm/atomic: Refuse to add invalid objects to requests
  + freedreno: add missing symbols to symbol-check
  + libdrm: Use readdir instead of readdir_r to avoid build warnings
  + Intel: Add a Kaby Lake PCI ID
  + amdgpu: Deinitialize vamgr_high{,_32}
  + intel: add support for ICL 11
  + amdgpu:support 16 ibs per submit for PAL/SRIOV
  + freedreno: add fd_pipe refcounting
  + drm/amdgpu: Remove IB count checking
  + intel/intel_chipset.h: Sync Cannonlake IDs.
  + libdrm: amdgpu: Adding DRM_RDWR flag in amdgpu_bo_export
  + amdgpu: enlarge the maximum number of cards supported</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1533384000">- Upate to version 2.4.93:
  + amdgpu: make sure to set CLOEXEC on duplicated FDs
  + xf86drm: drmGetDevice2: error out if the fd has unknown subsys
  + xf86drm: introduce drm_device_has_rdev() helper
  + xf86drm: Fold drmDevice processing into process_device() helper
  + xf86drm: Allocate drmDevicePtr's on stack
  + xf86drm: introduce a get_real_pci_path() helper
  + xf86drm: Add drmDevice support for virtio_gpu
  + tests/drmdevices: install alongside other utilities
  + tests/drmdevice: add a couple of printf headers
  + drmdevice: convert the tabbed output into a tree
  + drmdevice: print the correct host1x information
  + amdgpu: Take a lock before removing devices from fd_tab hash table.
  + amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
  + amdgpu: Destroy fd_hash table when the last device is removed.
  + intel: Introducing Whiskey Lake platform
  + intel: Introducing Amber Lake platform
  + xf86drm: Be sure to closedir before return
  + amdgpu: don't call add_handle_to_table for KMS BO exports
  + amdgpu: add amdgpu_bo_handle_type_kms_noimport
  + xf86drm: Fix error path in drmGetDevice2
  + Always pass O_CLOEXEC when opening DRM file descriptors
  + Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"
  + freedreno: add user ptr to fd_ringbuffer
  + freedreno: add fd_ringbuffer_new_object()
  + freedreno: small cleanup
  + freedreno: slight reordering
  + freedreno/msm: "stateobj" support</changelog>
  <changelog author="sndirsch@suse.com" date="1538913600">- Update to version 2.4.95
  * This release adds a fallback for realpath() which was blocked by the
    web-browser sand-boxing. While the browsers are fixed-up they seem to have
    little incentive to roll bugfix releases :-\</changelog>
  <changelog author="sndirsch@suse.com" date="1539777600">- Update to version 2.4.96
  * libdrm: Allow dynamic drm majors on linux
  * amdgpu/test: Allow BO mapping flags to be passed in tests
  * amdgpu/test: Fix deadlock tests for AI and RV v2
  * xf86drmHash: remove redundant zero init
  * freedreno/msm: get rid of ring_bo unref hack
  * freedreno: expose refcnt'ing on ringbuffers
  * freedreno: add flags param for rb creation
  * freedreno/msm: support suballocation for stateobj rb's
  * freedreno: remove deprecated ringmarker API
  * freedreno/msm: remove reset of linked rings
  * freedreno/msm: simplify emit_reloc_ring() vfunc
  * freedreno/msm: use hashtable to track submit.cmds table
  * freedreno/msm: simplify msm_ringbuffer_flush()
  * freedreno/msm: handle ring-reloc to other stateobjs
  * freedreno/kgsl: fix build
  * freedreno/msm: fix c90 warning</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220800">- Fix --enable-freedreno option as it is not experimental anymore
- Add etnaviv support
- Add exynos support (used by Arndale board and Samsung Chromebook)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1545220801">- Enable aarch64 build for: etnaviv, exynos and tegra</changelog>
  <changelog author="sndirsch@suse.com" date="1548158400">- Update to version 2.4.97
  * amdgpu: update to latest marketing names from 18.50
  * amdgpu/test: Add illegal register and memory access test v2
  * amdgpu/test: Disable deadlock tests for all non gfx8/9 ASICs.
  * amdgpu/test: Enable deadlock test for CI family (gfx7)
  * amdgpu: add VM test to exercise max/min address space
  * doc: Rename README&amp;CONTRIBUTING to .rst
  * Avoid hardcoded strlens in drmParseSubsystemType().
  * drm: Attempt to parse SPI devices as platform bus devices.
  * xf86drmHash: remove unused loop variable
  * meson: fix typo in compiler flag
  * tests: skip drmdevice test if the machine doesn't have any drm device
  * freedreno: remove always-defined #ifdef
  * xf86atomic: #undef internal define
  * README: reflow the project description to improve readability
  * xf86drm: implement drmParseSubsystemType for DragonFly
  * libdrm: Use DRM_IOCTL_GET_PCIINFO on DragonFly
  * tests/amdgpu/vcn: fix the nop command in IBs
  * gitignore: sort file
  * gitignore: add _build
  * amdgpu: update amdgpu_drm.h
  * amdgpu: add a faster BO list API
  * android: Fix 32-bit app crashing in 64-bit Android</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1559649600">- U_intel-sync-i915_pciids.h-with-kernel-aml.patch
  * adds support for Amberlake (jira #SLE-4989, bsc#1137515)
- U_intel-sync-i915_pciids.h-with-kernel-cml.patch
  * adds support for Cometalke (jira #SLE-4983, bsc#1137515)</changelog>
</package>
<package pkgid="a9663f4756ec6e9758d32fcd5ce9bf2244f73d2ceef5993707e4c56dfed77bf4" name="libksuseinstall-devel" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="d2269a9bf887c2a54a883e1f77676f90866155ca8a6a5e2d203586aae9304b8d" name="libksuseinstall-devel" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="e97e95c81200d918e2c626bba989487c9847bb7c29877a73defd2fdb0896cd43" name="libksuseinstall1-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="8909eb81be2ac0e2854d13ccc771eb6760f871b3ca39a5e7be09d6aecfa3e0ae" name="libksuseinstall1" arch="i586">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="4f89aa938eaa0ed4d667041b9951f3eaef4f177d29cfb6fa11648d23f4d31294" name="libksuseinstall1" arch="x86_64">
  <version epoch="0" ver="4.14.38" rel="lp151.9.5.1"/>
  <changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1488369600">- Add upstream patch to fix kio security issue (boo#1027520)
  * kio-sanitize-url-for-proxy.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 4.14.30
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 4.14.29:
  * Prepare for 4.14.30
  * Sanitize URLs before passing them to FindProxyForURL</changelog>
  <changelog author="alarrosa@suse.com" date="1489060801">- Drop kio-sanitize-url-for-proxy.patch which was merged upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 4.14.31
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.php
- Changes since 4.14.30:
  * Prepare for 4.14.31
  * khtml: Delete pointer _before_ returning.</changelog>
  <changelog author="alarrosa@suse.com" date="1493812800">- Add fix-kauth-bypass-CVE-2017-8422.patch to fix an exploit
  against kauth that would allow to bypass it (bsc#1036244,
  CVE-2017-8422)</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 4.14.32
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 4.14.31:
  * Verify that whoever is calling us is actually who he says he is
  * Prepare for 4.14.32
  * http slave: send error page after authorization failure (kde#373323)
- Drop upstreamed patches:
  * fix-kauth-bypass-CVE-2017-8422.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 4.14.33
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 4.14.32:
  * Prepare for 4.14.33</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 4.14.33:
  * Prepare for 4.14.34</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to 17.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 4.14.34:
  * Support SVG in Konqueror's about page
  * [cmake]: De-duplicate "else" to fix build with cmake-3.9</changelog>
  <changelog author="wbauer@tmo.at" date="1508241600">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 4.14.35:
  * Fix build with &gt;=enchant-2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 4.14.38
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 4.14.37:
  * Prepare for 4.14.38</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add patch to not build against Qt4 WebKit:
  * Skip-qtwebkit-parts.patch
  * Vade retro satana</changelog>
  <changelog author="dimstar@opensuse.org" date="1512907200">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wbauer@tmo.at" date="1513080000">- Add 0001-Make-kssl-compile-against-OpenSSL-1.1.0.patch (backported
  from KF5's kdelibs4support) to allow building with openSSL 1.1.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513425600">- Do not build against QCA</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1538395200">- Add 0001-Fix-the-smbclient-4.9-check.patch to fix the libsmbclient
  symbols check in kdebase4-runtime.
- Run spec-cleaner.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1549540800">- Remove requirements on upower: it is long deprecated and there
  is no longer a Qt4 based desktop to use it (boo#1124573)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1565179200">- Add patch to drop involuntary command execution (boo#1144600, CVE-2019-14744):
  * 0001-Security-remove-support-for-.-in-config-keys-with-e-.patch</changelog>
</package>
<package pkgid="2c94e229ff4fb59d07f4ea62df89fe0e4e1fe1fa663a86f4e45900d49e97161a" name="libldap-2_4-2" arch="i586">
  <version epoch="0" ver="2.4.46" rel="lp151.10.3.1"/>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
</package>
<package pkgid="ef51d0da7eeb476b1131870dc3472adcf3ecd4a486c1e528ca1eb3fa2308e074" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp151.10.3.1"/>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
</package>
<package pkgid="ea96d01b5dd201821528ab709432974a4638c18a114da3d4eff8ecbd445d4e88" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp151.10.3.1"/>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
</package>
<package pkgid="c55672c582cdf3aecfe45605e74e18abf3fb17265f3ce5566426fb2e43bad958" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="lp151.10.3.1"/>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
</package>
<package pkgid="33d720c49dc1e7917a9d8816d5c59b59c848f5a72182dccf44f2b88cecd8281e" name="libliveMedia66" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="9f103959358f221253d8a03237ca383d32182b84f76cee6bae3b6df7437b4dcc" name="liblldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="b8241b5a0f6ee5aca822d87803f432987cf15694744c03cca44e6aff8c7d70ce" name="liblldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="b0775c92b129994e7b4a825279c144a8c6e30215ce3a80ad7ef0d5ae8b8c61af" name="liblmdb-0_9_17" arch="i586">
  <version epoch="0" ver="0.9.17" rel="lp151.4.3.1"/>
  <changelog author="kkaempf@suse.com" date="1406548800">- Prevent deadlock when process holding the db lock dies
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- command line tools for debugging
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410350400">- automake.diff changes:
  * for autoconf tests to have effect, (like those in
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be
  included as first file in all C code.
  * in 32 bit systems, ensure we support large databases.
  * Switch the compiler to the current C standard, currently -std=gnu99
  in upcoming autoconf versions it is C11 though.
- liblmdb-implicit-decl.patch atol() requires stdlib.h
- Enable verbose build, rpmlint depends on that to work.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
</package>
<package pkgid="503313316ae52ceb47d882b8423fbff76f80e296635daee753361e4ca6e3c64e" name="liblmdb-0_9_17" arch="x86_64">
  <version epoch="0" ver="0.9.17" rel="lp151.4.3.1"/>
  <changelog author="kkaempf@suse.com" date="1406548800">- Prevent deadlock when process holding the db lock dies
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- command line tools for debugging
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410350400">- automake.diff changes:
  * for autoconf tests to have effect, (like those in
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be
  included as first file in all C code.
  * in 32 bit systems, ensure we support large databases.
  * Switch the compiler to the current C standard, currently -std=gnu99
  in upcoming autoconf versions it is C11 though.
- liblmdb-implicit-decl.patch atol() requires stdlib.h
- Enable verbose build, rpmlint depends on that to work.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
</package>
<package pkgid="0c7ed8b5677f18ef8c6b37e4360550289e16a6289ac44af07fa9b949ac48ca59" name="liblmdb-0_9_17-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.17" rel="lp151.4.3.1"/>
  <changelog author="kkaempf@suse.com" date="1406548800">- Prevent deadlock when process holding the db lock dies
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- command line tools for debugging
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410350400">- automake.diff changes:
  * for autoconf tests to have effect, (like those in
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be
  included as first file in all C code.
  * in 32 bit systems, ensure we support large databases.
  * Switch the compiler to the current C standard, currently -std=gnu99
  in upcoming autoconf versions it is C11 though.
- liblmdb-implicit-decl.patch atol() requires stdlib.h
- Enable verbose build, rpmlint depends on that to work.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
</package>
<package pkgid="d0ae673343005e3fef637b75194293f144f10018ecb04d3118cea5e6d93e287c" name="liblvm2app2_2" arch="i586">
  <version epoch="0" ver="2.02.180" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="d4bef08f10db0677b2257f4fccdd20a02b8b63b7c19d6c183af290f091a891f6" name="liblvm2app2_2" arch="x86_64">
  <version epoch="0" ver="2.02.180" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="6b6058c00d96476a882c73f5a1c242cebe9de7678d71ef05ee7fc5e07d3d8af8" name="liblvm2app2_2" arch="i586">
  <version epoch="0" ver="2.02.180" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="301022ed0dcbb3b5a66f556a3da5ee72d40aec334b903294db65885ae73d5927" name="liblvm2app2_2" arch="x86_64">
  <version epoch="0" ver="2.02.180" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="73784f34e043fba44d049c5ac1060b00a6365eeeff5441b809b79cfafc741eb5" name="liblvm2cmd2_02" arch="i586">
  <version epoch="0" ver="2.02.180" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="3f5cb988308f456767adde8b98bf26515d562e120fa7af5447b6aaeaabf1ab7f" name="liblvm2cmd2_02" arch="x86_64">
  <version epoch="0" ver="2.02.180" rel="lp151.4.3.1"/>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
</package>
<package pkgid="2746603fe3c343cab52da822497468d67bda2ee687e0602bb59f0d7a828eac9c" name="liblvm2cmd2_02" arch="i586">
  <version epoch="0" ver="2.02.180" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="762754806ee9220108ecaf86ea22703c0d3ce6cb4905a601acdaf016b00fb037" name="liblvm2cmd2_02" arch="x86_64">
  <version epoch="0" ver="2.02.180" rel="lp151.4.6.1"/>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1527595200">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1081530)</changelog>
  <changelog author="ghe@suse.com" date="1531915200">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
  <changelog author="ghe@suse.com" date="1532347200">- Update to LVM2.2.02.180
  Never send any discard ioctl with test mode.
  Fix thin-pool alloc which needs same PV for data and metadata.
  Extend list of non-memlocked areas with newly linked libs.
  Enhance vgcfgrestore to check for active LVs in restored VG.
  lvconvert: provide possible layouts between linear and striped/raid
  Fix unmonitoring of merging snapshots.
  Add missing -l description in fsadm man page.
  Cache can uses metadata format 2 with cleaner policy.
  Avoid showing internal error in lvs output or pvmoved LVs.
  Fix check if resized PV can also fit metadata area.
  Reopen devices RDWR only before writing to avoid udev issues.
  Change pvresize output confusing when no resize took place.
  Fix lvmetad hanging on shutdown.
  Fix mem leak in clvmd and more coverity issues.
  Fix that pvmove does not work (bsc#1080299)
- Drop patches that have been merged upstream
  - fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch
  - lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  - lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch
  - bug-1095960_dev_io-no-discard-in-testmode.patch
- Refresh patches
  + bsc1080299-detect-clvm-properly.patch
  + bug-950089_test-fix-lvm2-testsuite-build-error.patch
- Update spec files
  Fix BuildRequires package name for modprobe (bsc#1102668)
  Fix cmirrord LV creation/activation failure (bsc#1091863)
- Fix building error in OBS due to the script interpreter
  + tests-specify-python3-as-the-script-interpreter.patch</changelog>
  <changelog author="ghe@suse.com" date="1535544000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  + bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
  <changelog author="ghe@suse.com" date="1541419200">- Prevent writing beyond metadata area (bsc#1114113)
  + bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="ghe@suse.com" date="1566388800">- MD devices should be detected by LVM2 with metadata=1.0/0.9 (bsc#1145231)
  + bug-1145231_lvmetad-improve-scan-for-pvscan-all.patch
  + bug-1145231_scan-use-full-md-filter-when-md-1.0-devices-are-pres.patch
  + bug-1145231_scan-enable-full-md-filter-when-md-1.0-devices-are-p.patch
  + bug-1145231_scan-md-metadata-version-0.90-is-at-the-end-of-disk.patch
  + bug-1145231_pvscan-lvmetad-use-full-md-filter-when-md-1.0-device.patch
  + bug-1145231_pvscan-lvmetad-use-udev-info-to-improve-md-component.patch
  + bug-1145231_apply-obtain_device_list_from_udev-to-all-libudev-us.patch</changelog>
</package>
<package pkgid="ec816679317bea6d330e9459ca33327c87198280f03923e431146bbf49b4b0fb" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d5e475704e4a97ebe7c91527e71bad2f23baf7481b0e57e040158eafc47a76a0" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="5f38c7bd1a52b0dacd035632963e60ae7c7d33535f9c621838f628e0307791cb" name="liblwres160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="40845067f1c0ae52752951aab3563d32b351203a82ee91469ef0ee779a64cfdb" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="662ddf57a7a6a28ee5e622e29bf67a8d0c3c5d8b1978bfc9325d8898e2f2066c" name="liblwres160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="769cb550e2e44bd29d92b1f0ff9384fe6119be67bfe8db4a278ed94a4aa36c28" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.6.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="b6a8775c787b1a80d85b8bc3ac982bac56de8b5a2beb7cc878fc255e2f9add4d" name="liblxc-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp151.4.5.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
  <changelog author="bernd-obs@wachter.fi" date="1535371200">- 0001-Backport-autodev-fix-from-lxc-master.patch: fix unprivileged
  lxc containers on kernel &gt;= 4.18</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1536926400">- move bash completion file from /etc/bash_completion.d/lxc to
  /usr/share/bash-completion/completions/ to avoid warning</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1537012800">- fix for bsc#988348 (lxc: enable setuid bit on lxc-user-nic)
  - do not remove setuid bit for lxc-user-nic on releases with suse_version &gt;=1550
  - remove setuid stuff from README.SUSE on releases with suse_version &gt;=1550</changelog>
  <changelog author="Bjoern Voigt &lt;bjoernv@arcor.de&gt;" date="1549281600">- compilation fixed for Python 3.7
  (PyOS_AfterFork() replaced with PyOS_AfterFork_Child())
  added patch 0001-PyOS_AfterFork-python3.7.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Rework packaging to be a more modern openSUSE-style.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601601">- Update to LXC 3.1.0. The changelog is far too long to include here, please
  look at the changelogs posted on https://linuxcontainers.org/. boo#1131762
  * Includes fixes for CVE-2019-5736 bsc#1122185.
  + pam_cgfs is now provided by this package, since upstream has moved the
    sources to LXC (it used to be part of lxcfs).
  * All of the patches have been upstreamed or are no longer relevant:
  - 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch
  - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch
  - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch
  - 0001-Backport-autodev-fix-from-lxc-master.patch
  - 0001-PyOS_AfterFork-python3.7.patch
- Add a warning if lxc-user-nic is not setuid after set_permissions, to ensure
  users actually read the warning (which means we get to remove README.SUSE).
  It also supports people using paranoid mode, which is why it's done in
  post-install and isn't packaged. boo#988348
- Quite a lot of the runtime helpers and configuration have been moved to
  liblxc, in order to allow LXD to make use of them (because, in truth, they
  were always a requirement of liblxc and not just the lxc-* tools).
- Add workaround for pre-15 distros, where _sharedstatedir was inexplicably
  /usr/com, to use the correct directory of /var/lib.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Trim project history from package description.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554120000">- Fix builds on SLE12, by depending on apparmor-profiles instead of
  apparmor-abstractions. In addition, remove the Requires on abstractions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554638400">- Avoid wrong permissions warning by conditionally setting the setuid bit based
  on what version of permissions is available in that distribution (makes no
  difference but results in less confusion to users).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1554897600">- fix apparmor dropin to be compatible with LXC 3.1.0 (bsc#1131762)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1555761600">- Rework /var/adm/update-messages handling to be far less complicated, and more
  packaging-friendly (by update-messages be owned by the rpm) as well as
  storing the update message in a autoconf-templated source file.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1568289600">- Add backport of https://github.com/lxc/lxc/pull/3102 to fix build failures on
  openSUSE Leap.
  + 0001-tree-wide-initialize-all-auto-cleanup-variables.patch
- Update to lxc 3.2.1. The changelog can be found at
  https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322
  + seccomp: support syscall forwarding to userspace
  + add lxc.seccomp.allow_nesting
  + pidfd: Add initial support for the new pidfd api
  * Many hardening improvements.
  * Use /sys/kernel/cgroup/delegate file for cgroup v2.
  * Fix CVE-2019-5736 equivalent bug.</changelog>
</package>
<package pkgid="9b03e5626654136494664ba68ae28f88b1da41f6f89ecb745844f0aa96dd12b4" name="liblxc1" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp151.4.5.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
  <changelog author="bernd-obs@wachter.fi" date="1535371200">- 0001-Backport-autodev-fix-from-lxc-master.patch: fix unprivileged
  lxc containers on kernel &gt;= 4.18</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1536926400">- move bash completion file from /etc/bash_completion.d/lxc to
  /usr/share/bash-completion/completions/ to avoid warning</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1537012800">- fix for bsc#988348 (lxc: enable setuid bit on lxc-user-nic)
  - do not remove setuid bit for lxc-user-nic on releases with suse_version &gt;=1550
  - remove setuid stuff from README.SUSE on releases with suse_version &gt;=1550</changelog>
  <changelog author="Bjoern Voigt &lt;bjoernv@arcor.de&gt;" date="1549281600">- compilation fixed for Python 3.7
  (PyOS_AfterFork() replaced with PyOS_AfterFork_Child())
  added patch 0001-PyOS_AfterFork-python3.7.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Rework packaging to be a more modern openSUSE-style.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601601">- Update to LXC 3.1.0. The changelog is far too long to include here, please
  look at the changelogs posted on https://linuxcontainers.org/. boo#1131762
  * Includes fixes for CVE-2019-5736 bsc#1122185.
  + pam_cgfs is now provided by this package, since upstream has moved the
    sources to LXC (it used to be part of lxcfs).
  * All of the patches have been upstreamed or are no longer relevant:
  - 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch
  - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch
  - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch
  - 0001-Backport-autodev-fix-from-lxc-master.patch
  - 0001-PyOS_AfterFork-python3.7.patch
- Add a warning if lxc-user-nic is not setuid after set_permissions, to ensure
  users actually read the warning (which means we get to remove README.SUSE).
  It also supports people using paranoid mode, which is why it's done in
  post-install and isn't packaged. boo#988348
- Quite a lot of the runtime helpers and configuration have been moved to
  liblxc, in order to allow LXD to make use of them (because, in truth, they
  were always a requirement of liblxc and not just the lxc-* tools).
- Add workaround for pre-15 distros, where _sharedstatedir was inexplicably
  /usr/com, to use the correct directory of /var/lib.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553860800">- Trim project history from package description.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554120000">- Fix builds on SLE12, by depending on apparmor-profiles instead of
  apparmor-abstractions. In addition, remove the Requires on abstractions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554638400">- Avoid wrong permissions warning by conditionally setting the setuid bit based
  on what version of permissions is available in that distribution (makes no
  difference but results in less confusion to users).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1554897600">- fix apparmor dropin to be compatible with LXC 3.1.0 (bsc#1131762)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1555761600">- Rework /var/adm/update-messages handling to be far less complicated, and more
  packaging-friendly (by update-messages be owned by the rpm) as well as
  storing the update message in a autoconf-templated source file.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1568289600">- Add backport of https://github.com/lxc/lxc/pull/3102 to fix build failures on
  openSUSE Leap.
  + 0001-tree-wide-initialize-all-auto-cleanup-variables.patch
- Update to lxc 3.2.1. The changelog can be found at
  https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322
  + seccomp: support syscall forwarding to userspace
  + add lxc.seccomp.allow_nesting
  + pidfd: Add initial support for the new pidfd api
  * Many hardening improvements.
  * Use /sys/kernel/cgroup/delegate file for cgroup v2.
  * Fix CVE-2019-5736 equivalent bug.</changelog>
</package>
<package pkgid="4b3dd6868ffd9a3ed5908a0b538bb56fd216f869a5d485eeede3b20ecca1180a" name="liblz4-1" arch="i586">
  <version epoch="0" ver="1.8.0" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to version 1.3.1+svn123
  * Added a pkgconfig file
  * Fix a LZ4HC streaming bug
  * Updated the framing specificaiton to 1.4.1</changelog>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
</package>
<package pkgid="1f440ebed2399807c3b76d27ad13af5f3644be116d74043397fbff1d2bcb0230" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to version 1.3.1+svn123
  * Added a pkgconfig file
  * Fix a LZ4HC streaming bug
  * Updated the framing specificaiton to 1.4.1</changelog>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
</package>
<package pkgid="15c39dfc107f1bc31017d3c0cdaed57d68e7e3754a1bb07c20c7e959d579aa01" name="liblz4-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to version 1.3.1+svn123
  * Added a pkgconfig file
  * Fix a LZ4HC streaming bug
  * Updated the framing specificaiton to 1.4.1</changelog>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
</package>
<package pkgid="adb8b90ac5eb12b89af4ed4b5ee780e71ec292cd0874e6b958151b51d3789774" name="liblz4-devel" arch="i586">
  <version epoch="0" ver="1.8.0" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to version 1.3.1+svn123
  * Added a pkgconfig file
  * Fix a LZ4HC streaming bug
  * Updated the framing specificaiton to 1.4.1</changelog>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
</package>
<package pkgid="a7b30181253a1804e470c40d520592a12b05e5d6368f3d1be345a72badd85d22" name="liblz4-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to version 1.3.1+svn123
  * Added a pkgconfig file
  * Fix a LZ4HC streaming bug
  * Updated the framing specificaiton to 1.4.1</changelog>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
</package>
<package pkgid="c784113cca4ea6e5a4e893217a1c71e43180c8e0653637322fa67698c7cd758c" name="liblzma5-32bit" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="eafc46b9299f8e42cee467961bc8a673395350690ac07129b1c40cfc355adffd" name="liblzma5" arch="i586">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="2971f511001408dbc6932a9ac29f052e95e3c72e75f66bce952ffc6ce8574bc6" name="liblzma5" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="bbf8dd90a1794bf7420a43e3e4c9da43a4045a31e39105cf768b50d70bdbd5f7" name="libmariadb-devel" arch="i586">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="8e3617a36f40587c7afed84b6666178d49b8df3c4da56757d77d020f4fb6bfb9" name="libmariadb-devel" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="b2cd7678d07687b5b882efbd2a628e5e4748c9c8571f16cd3f250be66fb4bfcd" name="libmariadb3" arch="i586">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="86e882521c9b7abfd511a9619339b669b30f2a17fc4ffd3e2314a056d3f08156" name="libmariadb3" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="ddd470371d45ab2398d1f18e2ff9e1fd1065f02bcd7e749fd58cb43354a01dd3" name="libmariadb3-32bit" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="e19b893ca138afb24d980a3b53eb51166a4bc7c61eb6d0d6ca40b330e80bad83" name="libmariadb_plugins" arch="i586">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="3635620dc1603b9c6ebb1ff53477ada13b27f224cf66879cd997003ded211e36" name="libmariadb_plugins" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="1ab7de0a67b3c36e62d4116852ef71f8b9635d3ad7c9eda75b52895a974e4cd6" name="libmariadbprivate" arch="i586">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="b7a880ec0c5d7c3b91a5f32aea061475202f79c52977fa24b587aeac07663130" name="libmariadbprivate" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp151.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1471867200">- initial package</changelog>
  <changelog author="adam.majer@suse.de" date="1490270400">- Update to version 2.3.2
  * Plugin API interface change: Changed the interface of
    authentication plugins, allowing plugins from C/C 3.0
    (like GSSAPI/Kerberos plugin)
  * CONC-205: Any field going after a TEXT field in the selecion
    list is fetched incorrectly (prepared statements)
  * CONC-198: Can't use more than one statement per connection
  * CONC-223: Add client support for missing collations
  * MDEV-10894: big endian conversion
  * fixed packet_length in dialog plugin
  * fixed include of my_stmt.h
  * fixed wrong behavior of read_timeout
  * fixed timeout for non-blocking operations
  * fixed output for plugindir in mariadb_config
  * removed extra check for non binary result types in fetch_bin
    (prepared statements)
- mariadb.keyring: add MariaDB Enterprise signing key
- bigendian_type_fixes.patch: fix build failure on Big endien
- absolute_path_fix.patch:
  * remove ugly paths in mariadb_config
  * list correct include paths
- private_library.patch: shared library with exported private
  symbols in place of a static library
- mariadb-connector-c-2.3.1_unresolved_symbols.patch: add missing
  library to link requirements.</changelog>
  <changelog author="adam.majer@suse.de" date="1490788800">- Set proper MySQL socket path for localhost connections</changelog>
  <changelog author="jengelh@inai.de" date="1491220800">- Update descriptions and RPM groups</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove unused gnutls from buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1499947201">- New upstream version 2.3.3:
  * Fixed build for big-endian platforms. Obsoletes
    bigendian_type_fixes.patch
  * Changed parameter type for parameter reconnect in
    mysql_optionsv from uint to my_bool
- absolute_path_fix.patch: refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Fix RPM groups once more.</changelog>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
</package>
<package pkgid="23079d7e67d9116f3803ee7a7debba19aa461f213a27894e3484e228894edbb0" name="libmate-menu2" arch="i586">
  <version epoch="0" ver="1.20.0" rel="lp151.3.5.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1565956800">- Fix a crash of mate-menu due to a missing symbol (boo#1144346)
  Add patches from upstream git tree therefore:
  * 0001-drop-python2-support.patch
  * 0002-require-gio-unix.patch
  * 0003-require-gio-unix-drop-python-example.patch
  * 0004-use-G_BEGIN-END_DECLS.patch
  * 0005-backport-from-gnome-menus.patch
  * 0006-udpate-examples.patch
  Remove patches:
  * mate-menus-glib-2.48.patch: not necessary anymore as glib is
    recent enough on Leap 15.x. And it would requires changes on the
    patch series above.
  Remove subpackages:
  * python2-mate-menus and python-mate-menus: dropped in patch series,
    mate-menus examples go to the devel subpackage, which also
    obsoletes the packages.</changelog>
</package>
<package pkgid="3993bd8b5beb95eba57c0f9eeac0cb6f57c9b689df0ed82acb857e294e371e68" name="libmate-menu2" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="lp151.3.5.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1565956800">- Fix a crash of mate-menu due to a missing symbol (boo#1144346)
  Add patches from upstream git tree therefore:
  * 0001-drop-python2-support.patch
  * 0002-require-gio-unix.patch
  * 0003-require-gio-unix-drop-python-example.patch
  * 0004-use-G_BEGIN-END_DECLS.patch
  * 0005-backport-from-gnome-menus.patch
  * 0006-udpate-examples.patch
  Remove patches:
  * mate-menus-glib-2.48.patch: not necessary anymore as glib is
    recent enough on Leap 15.x. And it would requires changes on the
    patch series above.
  Remove subpackages:
  * python2-mate-menus and python-mate-menus: dropped in patch series,
    mate-menus examples go to the devel subpackage, which also
    obsoletes the packages.</changelog>
</package>
<package pkgid="9b26d80b064e27337fd83bc65e5a75c631565e8dcdc42fdb37b473bcdc50362c" name="libmate-menu2" arch="i586">
  <version epoch="0" ver="1.20.0" rel="lp151.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
</package>
<package pkgid="e078cfff92fc2e9c90fb920eaa5d9ce1ac7adb7988a7e38efdb0169879e99163" name="libmate-menu2" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="lp151.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
</package>
<package pkgid="3e7611180b76d046e79d3c4c4fa92706ae259eed7cd5211aa01e7b7a5bdc6273" name="libmate-menu2-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="lp151.3.5.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1565956800">- Fix a crash of mate-menu due to a missing symbol (boo#1144346)
  Add patches from upstream git tree therefore:
  * 0001-drop-python2-support.patch
  * 0002-require-gio-unix.patch
  * 0003-require-gio-unix-drop-python-example.patch
  * 0004-use-G_BEGIN-END_DECLS.patch
  * 0005-backport-from-gnome-menus.patch
  * 0006-udpate-examples.patch
  Remove patches:
  * mate-menus-glib-2.48.patch: not necessary anymore as glib is
    recent enough on Leap 15.x. And it would requires changes on the
    patch series above.
  Remove subpackages:
  * python2-mate-menus and python-mate-menus: dropped in patch series,
    mate-menus examples go to the devel subpackage, which also
    obsoletes the packages.</changelog>
</package>
<package pkgid="65a38b9b3af2c880387d1625cecf05306079b420f3614dd4d8769c8f2ceed84a" name="libmate-menu2-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="lp151.3.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 1.9.0 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 1.9.1 (unstable)
  + No changelog available</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Update to version 1.9.90 (unstable)
  * Translations update
  * Bugfixes</changelog>
  <changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * No changes since version 1.9.90</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444910400">- Update to 1.11.0:
  * Use pkg-config to check for Python (requires Python 2.7).
  * Some fixes and cleanups.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0.
- Add baselibs.conf.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453723200">- Update to version 1.13.0:
  * Move preferences-categories.menu from mate-control-center.
    That file can be packaged separately in distros to let users
    decide whether they want categories in preferences menu or not.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.1:
  * Make mate-applications-merged/ a symlink to
    applications-merged/.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
  * Update translations.
- Add mate-menus-glib-2.48.patch: Restore GLib 2.48 support.
- Rename python-mate-menus to python2-mate-menus for
  openSUSE Leap 15.0 and newer.</changelog>
</package>
<package pkgid="b670415a0a049d04233f5eb2e05740a784daa3657ef03cda6a50b40baaf55dbf" name="libmatroska" arch="src">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to version 1.4.1
  * Added new elements/classes DiscardPadding, CodecDelay and
    SeekPreRoll
  * The licensing information has been cleared up/unified.
  * The Makefile now contain options for specifying the destination
    base directory during installation ("DESTDIR") and for
    specifying which library types to build ("link").
  * The libraries are built without the "-ansi" and
    "-fno-gnu-keywords" flags on Linux
  * Code cleanup
- Remove matroska-noansiflag.patch. Applied upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Add C++ visibility support by simply reusing the win32
  dll code for the same purpose.
- added patches:
  * matroska-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- Revert last change for now as it breaks mkvtoolnix which
  uses internal symbols :-(
  keep fvisibility-inlines-hidden though</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert fvisibility-inlines-hidden: still breaks mkvtoolnix
  on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1407326401">- Add libmatroska-heed-ldflags.diff so that make places LDFLAGS
  onto the command line for generating the .so file</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="b39535ecfa2d1375245f3a9f3bc3c7762576caba1a814fd3a2babdcc2cba795a" name="libmatroska-devel" arch="i586">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="8c84280b28f5c02b33cb53c900e68efe74e9ea9f422fe9354674a94d64a1c58c" name="libmatroska-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="00f142111ab4bceae80b8acc352439bd4f03d00dbfb7502a63b4e5f1a3bd7a98" name="libmatroska6" arch="i586">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="97dce0f39c1f794a807a46380f2c50344c86b46c0f7d82c412d85369376715c4" name="libmatroska6" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="d54f5eaa7bd0aac81a5bf61ef9a560f67f45032902b3a38eefeb4fefb2b89d81" name="libmatroska6-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="bc0eb3e010e0296e03cb0c48ce27e755b48814027bffbcc7fd1180d29f58ca54" name="libmediacheck-devel" arch="i586">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="eeae65a9754a70fa4823df182c8031f0e959deafb87228cd6d66a30c2673da6d" name="libmediacheck-devel" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="cf9541ac06ddf44b3eb49f7500f8467718d105f9c6696d90f0256876e1f82c28" name="libmediacheck5" arch="i586">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="846c0bef0bf61d1066e5ff9bcbeb7261ae09142c15dd312d2d126213602d6089" name="libmediacheck5" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp151.2.3.1"/>
  <changelog author="snwint_jenkins@suse.com" date="1413288000">- added 'archive' Makefile target
- update git2log
- 3.3</changelog>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
</package>
<package pkgid="707efb109d8dceaafc0f7899a1f8149a3f30301867fd48b932f1d911759b4c87" name="libminizip1" arch="i586">
  <version epoch="0" ver="1.2.11" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
</package>
<package pkgid="483f878f77aa99dbcdd853175cde27bce1a3269a49de5d46b61d5c473141f3a9" name="libminizip1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
</package>
<package pkgid="222d1a9fcfd976ce3e133a5dae6e9f02dc72beb22e8ec83efbb1b24b44de3a8f" name="libminizip1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
</package>
<package pkgid="1d7a6047043cd240427e8fddc6fbd886a7323d15d4439371c49576c0768029a0" name="libmirage" arch="src">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1337601600">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1356177600">- Update to new upstream release 2.0.0 (up from 1.5.0)
  * Added ISZ, CSO and DMG file filters
  * Converted DAA parser to a file filter and added support for the
  related GBI format
  * Converted audio fragment to a file filter
  * Added file filter machinery and converted existing code to use it
  * Image analyzer displays disc structures
  * Added support for gobject introspection
  * Added support for GZIP and XZ compressed images
  * Added support for ECM'ed files
  * Improved CIF parser
  * Partial support for (one track) MDX images
  * Improved GVFS support</changelog>
  <changelog author="jengelh@inai.de" date="1357387200">- Add 0001-libMirage-CMake-fix-SOVERSION-which-should-be-set-to.patch</changelog>
  <changelog author="jengelh@inai.de" date="1361707200">- Add 0001-libMirage-READCD-Parser-when-verifying-the-file-don-.patch
  0001-libMirage-READCD-Parser-readcd-from-cdrtools-appears.patch
  to make images created by readcd(1) usable again
  (bugurl: http://sf.net/p/cdemu/feature-requests/21/)</changelog>
  <changelog author="jengelh@inai.de" date="1363089600">- Add 0001-libMirage-SNDFILE-filter-instead-of-a-single-frame-c.patch
  to resolve excess CPU usage during CDDA readout
  (bnc#809181, bnc#809862)</changelog>
  <changelog author="jengelh@inai.de" date="1370779200">- Update to new upstream release 2.1.0
  * This release adds a MacBinary/NDIF file filter, a new resource
  fork parser for DMG, samplerate conversion for the SndFile filter,
  non-blocking I/O, and dynamic device addition/removal.
- Remove patches (merged upstream):
  0001-libMirage-CMake-fix-SOVERSION-which-should-be-set-to.patch,
  0001-libMirage-READCD-Parser-readcd-from-cdrtools-appears.patch,
  0001-libMirage-READCD-Parser-when-verifying-the-file-don-.patch,
  0001-libMirage-SNDFILE-filter-instead-of-a-single-frame-c.patch
- Add (cherry-picked fixes):
  0001-libMirage-proper-versioning-of-the-introspection-typ.patch</changelog>
  <changelog author="jengelh@inai.de" date="1385294400">- Update to new upstream release 2.1.1
  * sector's EDC is now computed using fast slice-by-8 CRC32 algorithm
  * added function for ISRC validation to be used by image parsers
- Remove 0001-libMirage-proper-versioning-of-the-introspection-typ.patch
  (merged upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="be08a787e0d62eebd2c6d51941c76aaf633ad0155f7d26df221d2fe534dc41c0" name="libmirage" arch="src">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1337601600">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1356177600">- Update to new upstream release 2.0.0 (up from 1.5.0)
  * Added ISZ, CSO and DMG file filters
  * Converted DAA parser to a file filter and added support for the
  related GBI format
  * Converted audio fragment to a file filter
  * Added file filter machinery and converted existing code to use it
  * Image analyzer displays disc structures
  * Added support for gobject introspection
  * Added support for GZIP and XZ compressed images
  * Added support for ECM'ed files
  * Improved CIF parser
  * Partial support for (one track) MDX images
  * Improved GVFS support</changelog>
  <changelog author="jengelh@inai.de" date="1357387200">- Add 0001-libMirage-CMake-fix-SOVERSION-which-should-be-set-to.patch</changelog>
  <changelog author="jengelh@inai.de" date="1361707200">- Add 0001-libMirage-READCD-Parser-when-verifying-the-file-don-.patch
  0001-libMirage-READCD-Parser-readcd-from-cdrtools-appears.patch
  to make images created by readcd(1) usable again
  (bugurl: http://sf.net/p/cdemu/feature-requests/21/)</changelog>
  <changelog author="jengelh@inai.de" date="1363089600">- Add 0001-libMirage-SNDFILE-filter-instead-of-a-single-frame-c.patch
  to resolve excess CPU usage during CDDA readout
  (bnc#809181, bnc#809862)</changelog>
  <changelog author="jengelh@inai.de" date="1370779200">- Update to new upstream release 2.1.0
  * This release adds a MacBinary/NDIF file filter, a new resource
  fork parser for DMG, samplerate conversion for the SndFile filter,
  non-blocking I/O, and dynamic device addition/removal.
- Remove patches (merged upstream):
  0001-libMirage-CMake-fix-SOVERSION-which-should-be-set-to.patch,
  0001-libMirage-READCD-Parser-readcd-from-cdrtools-appears.patch,
  0001-libMirage-READCD-Parser-when-verifying-the-file-don-.patch,
  0001-libMirage-SNDFILE-filter-instead-of-a-single-frame-c.patch
- Add (cherry-picked fixes):
  0001-libMirage-proper-versioning-of-the-introspection-typ.patch</changelog>
  <changelog author="jengelh@inai.de" date="1385294400">- Update to new upstream release 2.1.1
  * sector's EDC is now computed using fast slice-by-8 CRC32 algorithm
  * added function for ISRC validation to be used by image parsers
- Remove 0001-libMirage-proper-versioning-of-the-introspection-typ.patch
  (merged upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="59d179a09c08b16a74be88cf6cc0b9dd52292f03bbff4b51ae6a15b6db6d3285" name="libmirage-3_2" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="f8d29e4d9ac4b064e8600cfcc6ba75aea25c337c49d5d006f311e1b5884908e8" name="libmirage-3_2" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="54d062bc5b5ad01166725135abe115ce6f59fa12cc1491fd6c8038ab724abf35" name="libmirage-data" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="dea4a22558b3e21ad975329125877d2ff6650f55b4bb143267826d8d8693b516" name="libmirage-data" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="989ee288d03e178923ba8cb3bd3a8a0097202dfcb86a6710507bfd8ff32d9f41" name="libmirage-devel" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="778d24b55c9d4942aa718e22ef47cd785526fbd2da63f7baa4f5325c52ff7a58" name="libmirage-devel" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="482dd0a11d81ee0cd0894bad507c58dc2a00ab154021d6cb7eb20f71ea51ebc3" name="libmirage-lang" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="4e3ec556990d6eeaf3ae4073337bfb70894383534fa226de953665b3c1840441" name="libmirage-lang" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="84022139d20abe9bd271d0bb1e154397383dfae09e0220f8c3a2272dbe54c274" name="libmirage11" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 3.0.0
  * The file access and filter stream layer in libMirage were
  revised to allow implementation of filters for both reading and
  writing, and an infrastructure for implementing image writers
  was added, along with reference implementations for ISO and TOC
  writers.</changelog>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
</package>
<package pkgid="3317c39b1f6d25d0755951c939723737630ba0b694fd6c0e5428335726adb6ef" name="libmirage11" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp151.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1410004800">- Update to new upstream release 3.0.1
  * added missing installation rules for GBI and XMD MIME types</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 3.0.2
  * TOC writer: fixed object (session, track, fragment) leak.
  Fixes problems with no data being written to files in cases when
  a virtual image is written, its target files removed and then
  burned again.</changelog>
  <changelog author="jengelh@inai.de" date="1416916800">- Update to new upstream release 3.0.3
  * fixed an out-of-bounds array access when initializing CRC-32
  table data in mirage_helper_init_crc32_lut()</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Update to 3.0.4:
  * CUE, CCD, TOC, XCDRoast parsers: Fix a crash due to invalid
    read attempts on uninitialised regex match info structure.
  * MDS, MDX parser: Fix a memory leak.
  * CIF parser: Fix signature matching.
  * CIF parser: Improve pretty-print of some values.
  * CIF parser: Fix track length calculation.
  * CMake: Replace whitespaces in custom target names with "-"
    signs (silence CMP0037 warnings on CMake 3.2.2 and newer).
- Add missing MIME compilation.
- Use %cmake macro.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 3.0.5
  * Removed a spurious stream reference increment when creating
    text streams.
  * CUE parser: fixed the flags regex
  * Text-based parsers: added an assert to verify that all regexes
    have compiled properly.</changelog>
  <changelog author="zenitur@ya.ru" date="1491480000">- Fix SLES 11 build. We're also need Glib 2.28 instead of 2.22.5.
  Most desktop and workstation users are turn on Packman
  repository, so they're have Glib 2.28 installed from there.
- Added 01_g_assert_nonnull.diff patch taken from Cdemu PPA.
- Add libmirage-3.0.5-glib-2.28-workaround.patch
- Add glib2-devel as a required for the -devel package. That fixes
  some rpmbuild warning.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 3.1.0
  * Avoid using g_assert_nonnull() to keep compatibility with
    glib &lt;= 2.40.
  * Adjusted bundled MIME types to prevent false positives.
  * Added infrastructure for localization support.
  * Slovenian and Russian translations.
  * Improved compile-time checks of arguments passed to debug
    message functions.
  * Explicitly specify minimum required zlib version (1.2.4).
  * Fixed acquisition of underlying streams in DMG ans ISZ filters.
- Drop 01_g_assert_nonnull.diff,
  libmirage-3.0.5-glib-2.28-workaround.patch
  (integrated upstream)</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@ptotonmail.com&gt;" date="1561982400">- Update to new upstream release 3.2.2
  * ISO parser: fixed ISO9660/UDF pattern search for sector
    sizes 2332 and 2336.
  * ISO parser: added support for Nintendo GameCube and Wii
    ISO images.
  * Extended medium type guess to distinguish between DVD and
    BluRay images based on length.
  * Removed fabrication of disc structures from the library
    (moved to CDEmu daemon).
  * MDS parser: cleanup of disc structure parsing, fixed the
    incorrectly set structure sizes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Drop SLE11 recipes from specfile, the build is disabled anyway.
- Add 0001-libMirage-CSO-filter-validate-part-size.patch,
  0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
  [boo#1148087, CVE-2019-15540]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Add CVE-2019-15757.patch [boo#1148728]</changelog>
</package>
<package pkgid="5fcb9af74d14232e7736884a32e1cfa5d68b5c49ab6bfde4824401fa05bdc368" name="libmlx4-1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="1fb39ab37707f1364355bf8f21efe222fe53301bcd37722bdea571a29920b221" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8b5aa397a679dedfa997687b40aa95eef5a4972a2de14aa64ab3c2f83b2508b0" name="libmlx4-1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8b20eeeacf971721d76e542c266d6e0f67811169fe010d746aee21200d504d69" name="libmlx5-1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="110cf10e3f2a4971f56b264943ac546954dd899e292fc954fcad5dcd89d56c41" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="08cfdad225367e6a49d7fac65be3ee30c8c9f7a080a0614f95f6a3fedbf76d3f" name="libmlx5-1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="c64dbc211e4723990517567662eced00c405d1e50b77c69fab56f3e27da109d7" name="libmodplug-devel" arch="i586">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="3c8a31d4d543d1a5d907c8a228af236a1746b6a1f8c134de8459c9ccb1a22bbe" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="02d060f7783a81640c563c17fe89d939facb6ce80fd2e66e6d255c37e613bf88" name="libmodplug-devel" arch="i586">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="311c258650af69dfedfe99f14508fbb5d4a4da4b686a2d2d2c5b8b09c3de216c" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="2570d3751bcec806fe3aca5720049b017e6a7055912c3d2ad5ff094f62925d96" name="libmodplug1" arch="i586">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="b6b41a6edd0891c932d58f1cab05e6823c5919bef76791d8ab63b713bce12009" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="f14519990847c35b7240bb956eead1239a599763e0b5fcee1b4671a3dc2ce812" name="libmodplug1" arch="i586">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="04ded3e2704bc4d929ea2362fe2fbf4df9e85fb1c2a9d49cc359dab3cea3b011" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="0f829ce04a568cc3352c5cbc0a5a9849f99c3dc576d4331e7596e504fc61fed1" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="37c0606b06e8ab81ae94b007ba3e4a733f0ad706f559e3066dec069013e85d22" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="34e69740b4e141045c6515f9af804fe2c896a1ff8ba60de8b0ff68b2d0c69a4c" name="libmosquitto1" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1449662400">- enabled tcp wrapper support</changelog>
  <changelog author="mrueckert@suse.de" date="1449662401">- enable websocket supports</changelog>
  <changelog author="mrueckert@suse.de" date="1455192000">- update to 1.4.7
  - Broker:
  - Fix support for libwebsockets 1.22.
- changes from 1.4.6
  - Broker:
  - Add support for libwebsockets 1.6.
  - Client library:
  - Fix _mosquitto_socketpair() on Windows, reducing the chance
    of delays when publishing. Closes #483979.
  - Clients:
  - Fix "mosquitto_pub -l" stripping the final character on a
    line. Closes #483981.</changelog>
  <changelog author="mrueckert@suse.de" date="1459166400">- update to 1.4.8
  - Broker:
  - Wills published by clients connected to a listener with
    mount_point defined now correctly obey the mount point. This
    was a potential security risk because it allowed clients to
    publish messages outside of their restricted mount point.
    This is only affects brokers where the mount_point option is
    in use. Closes #487178.
  - Fix detection of broken connections on Windows.
    Closes #485143.
  - Close stdin etc. when daemonised. Closes #485589.
  - Fix incorrect detection of FreeBSD and OpenBSD.
    Closes #485131.
  - Client library:
  - mosq-&gt;want_write should be cleared immediately before a call
    to SSL_write, to allow clients using mosquitto_want_write()
    to get accurate results.</changelog>
  <changelog author="mrueckert@suse.de" date="1467115200">- update to 1.4.9
  - Broker:
  - Ensure websockets clients that previously connected with
    clean session set to false have their queued messages
    delivered immediately on reconnecting.  Closes #476314.
  - Reconnecting client with clean session set to false doesn't
    start with mid=1 again.
  - Will topic isn't truncated by one byte when using a
    mount_point any more.
  - Network errors are printed correctly on Windows.
  - Fix incorrect $SYS heap memory reporting when using ACLs.
  - Bridge config parameters couldn't contain a space, this has
    been fixed.  Closes #150.
  - Fix saving of persistence messages that start with a '/'.
    Closes #151.
  - Fix reconnecting for bridges that use TLS on Windows. Closes
    [#154].
  - Broker and bridges can now cope with unknown incoming PUBACK,
    PUBREC, PUBREL, PUBCOMP without disconnecting. Closes #57.
  - Fix websockets listeners not being able to bind to an IP
    address. Closes #170.
  - mosquitto_passwd utility now correctly deals with unknown
    command line arguments in all cases. Closes #169.
  - Fix publishing of $SYS/broker/clients/maximum
  - Fix order of #includes in lib/send_mosq.c to ensure struct
    mosquitto doesn't differ between source files when websockets
    is being used. Closes #180.
  - Fix possible rare crash when writing out persistence file and
    a client has incomplete messages inflight that it has been
    denied the right to publish.
  - Client library:
  - Fix the case where a message received just before the
    keepalive timer expired would cause the client to miss the
    keepalive timer.
  - Return value of pthread_create is now checked.
  - _mosquitto_destroy should not cancel threads that weren't
    created by libmosquitto. Closes #166.
  - Clients can now cope with unknown incoming PUBACK, PUBREC,
    PUBREL, PUBCOMP without disconnecting. Closes #57.
  - Fix mosquitto_topic_matches_sub() reporting matches on some
    invalid subscriptions.
  - Clients:
  - Handle some unchecked malloc() calls. Closes #1.
  - Build:
  - Fix string quoting in CMakeLists.txt. Closes #4.
  - Fix building on Visual Studio 2015. Closes #136.</changelog>
  <changelog author="mrueckert@suse.de" date="1489924800">- update to 1.4.11
  - Broker:
  - Fix crash when "lazy" type bridge attempts to reconnect.
    Closes #259.
  - maximum_connections now applies to websockets listeners.
    Closes #271.
  - Allow bridges to use TLS with IPv6.
  - Don't error on zero length persistence files. Closes #316.
  - For http only websockets clients, close files served over
    http in all cases when the client disconnects. Closes #354.
  - Fix error message when websockets http_dir directory does not
    exist.
  - Improve password utility error message. Closes #379.
  - Clients:
  - Use of --ciphers no longer requires you to also pass
  - -tls-version.  Closes #380.
  - Client library:
  - Clients can now use TLS with IPv6.
  - Fix potential socket leakage when reconnecting. Closes #304.
  - Fix potential negative timeout being passed to pselect.
    Closes #329.
- update 1.4.10
  - Broker:
  - Fix TLS operation with websockets listeners and libwebsockts
    2.x. Closes #186.
  - Don't disconnect client on HUP before reading the pending
    data. Closes #7.
  - Fix some $SYS messages being incorrectly persisted. Closes
    [#191].
  - Support OpenSSL 1.1.0.
  - Call fsync after persisting data to ensure it is correctly
    written. Closes #189.
  - Fix persistence saving of subscription QoS on big-endian
    machines.
  - Fix will retained flag handling on Windows. Closes #222.
  - Broker now displays an error if it is unable to open the log
    file. Closes #234.
  - Client library:
  - Support OpenSSL 1.1.0.
  - Fixed the C++ library not allowing SOCKS support to be used.
    Closes #198.
  - Fix memory leak when verifying a server certificate with a
    subjectAltName section. Closes #237.
  - Build:
  - Don't attempt to install docs when WITH_DOCS=no. Closes #184.</changelog>
  <changelog author="mardnh@gmx.de" date="1496059200">- Update to 1.4.12
  * Security:
  - Fix CVE-2017-7650, which allows clients with username or
    client id set to '#' or '+' to bypass pattern based ACLs or
    third party plugins. The fix denies message sending or
    receiving of messages for clients with a '#' or '+' in their
    username or client id and if the message is subject to a
    pattern ACL check or plugin check.
  * Broker:
  - Fix mosquitto.db from becoming corrupted due to client
    messages being
    persisted with no stored message. Closes #424.
  - Fix bridge not restarting properly. Closes #428.
  - Fix unitialized memory in gets_quiet on Windows. Closes #426.
  - Fix building with WITH_ADNS=no for systems that don't use
    glibc. Closes #415.
  - Fixes to readme.md.
  - Fix deprecation warning for OpenSSL 1.1. PR #416.
  - Don't segfault on duplicate bridge names. Closes #446.
  - Fix CVE-2017-7650.</changelog>
  <changelog author="mardnh@gmx.de" date="1499256000">- Update to 1.4.13
  * Security:
  - Fix CVE-2017-9868. The persistence file was readable
    by all local users, potentially allowing sensitive
    information to be leaked.
    This can also be fixed administratively, by restricting
    access to the directory in which the persistence file
    is stored.
  * Broker:
  - Fix for poor websockets performance.
  - Fix lazy bridges not timing out for idle_timeout.
  - Fix problems with large retained messages over websockets.
  - Set persistence file to only be readable by owner,
    except on Windows.
  - Fix CONNECT check for reserved=0, as per MQTT v3.1.1
    check MQTT-3.1.2-3.
  - When the broker stop, wills for any connected clients
    are now "sent".
  - Auth plugins can be configured to disable the check for +# in
    usernames/client ids with the auth_plugin_deny_special_chars
    option.  Partially closes #462.
  - Restrictions for CVE-2017-7650 have been relaxed - '/' is
    allowed in usernames/client ids. Remainder of fix for #462.
  Clients:
  - Don't use / in auto-generated client ids.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1499428800">- Add mosquitto-1.4.12-use-SOURCE_DATE_EPOCH.patch: Determine build
  timestamp from latest revision of .changes file in order to make
  the build reproducible and avoid useless republishing.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Fix incorrect RPM groups.
- Remove repeated license declaration from description.
  Trim package descriptions for size.
- Errors from user creation must not be ignored.</changelog>
  <changelog author="mardnh@gmx.de" date="1506945600">- Update to 1.4.14
  * Broker:
  - Fix regression from 1.4.13 where persistence data was not
    being saved.</changelog>
  <changelog author="mardnh@gmx.de" date="1519905600">- Update to version 1.4.15
  Security:
  * Fix CVE-2017-7652. If a SIGHUP is sent to the broker when there are no more
    file descriptors, then opening the configuration file will fail and security
    settings will be set back to their default values.
  * Fix CVE-2017-7651. Unauthenticated clients can cause excessive memory use by
    setting "remaining length" to be a large value. This is now mitigated by
    limiting the size of remaining length to valid values. A "memory_limit"
    configuration option has also been added to allow the overall memory used by
    the broker to be limited.
  Broker:
  * Use constant time memcmp for password comparisons.
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Fix memory leak if a client provided a username/password for a listener with
    use_identity_as_username configured.
  * Fix use_identity_as_username not working on websockets clients.
  * Don't crash if an auth plugin returns MOSQ_ERR_AUTH for a username check on
    a websockets client. Closes #490.
  * Fix 08-ssl-bridge.py test when using async dns lookups. Closes #507.
  * Lines in the config file are no longer limited to 1024 characters long.
    Closes #652.
  * Fix $SYS counters of messages and bytes sent when message is sent over
    a Websockets. Closes #250.
  * Fix upgrade_outgoing_qos for retained message. Closes #534.
  * Fix CONNACK message not being sent for unauthorised connect on websockets.
    Closes #8.
  Client library:
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Initialise "result" variable as soon as possible in
    mosquitto_topic_matches_sub. Closes #654.
  * No need to close socket again if setting non-blocking failed. Closes #649.
  * Fix mosquitto_topic_matches_sub() not correctly matching foo/bar against
    foo/+/#. Closes #670.
  Clients:
  * Correctly handle empty files with "mosquitto_pub -l". Closes #676.
  Build:
  * Don't run TLS-PSK tests if TLS-PSK disabled at compile time. Closes #636.</changelog>
  <changelog author="mardnh@gmx.de" date="1525348800">- Update to version 1.5
  Security:
  * Fix memory leak that could be caused by a malicious CONNECT packet. This
    does not yet have a CVE assigned. Closes #533493 (on Eclipse bugtracker)
  Broker features:
  * Add per_listener_settings to allow authentication and access control to be
    per listener.
  * Add limited support for reloading listener settings. This allows settings
    for an already defined listener to be reloaded, but port numbers must not be
    changed.
  * Add ability to deny access to SUBSCRIBE messages as well as the current
    read/write accesses. Currently for auth plugins only.
  * Reduce calls to malloc through the use of UHPA.
  * Outgoing messages with QoS&gt;1 are no longer retried after a timeout period.
    Messages will be retried when a client reconnects.  This change in behaviour
    can be justified by considering when the timeout may have occurred.
    + If a connection is unreliable and has dropped, but without one end
    noticing, the messages will be retried on reconnection. Sending
    additional PUBLISH or PUBREL would not have changed anything.
    + If a client is overloaded/unable to respond/has a slow connection then
    sending additional PUBLISH or PUBREL would not help the client catch
    up. Once the backlog has cleared the client will respond. If it is not
    able to catch up, sending additional duplicates would not help either.
  * Add use_subject_as_username option for certificate based client
    authentication to use the entire certificate subject as a username, rather
    than just the CN. Closes #469467.
  * Change sys tree printing output. This format shouldn't be relied upon and
    may change at any time. Closes #470246.
  * Minimum supported libwebsockets version is now 1.3.
  * Add systemd startup notification and services. Closes #471053.
  * Reduce unnecessary malloc and memcpy when receiving a message and storing
    it. Closes #470258.
  * Support for Windows XP has been dropped.
  * Bridge connections now default to using MQTT v3.1.1.
  * mosquitto_db_dump tool can now output some stats on clients.
  * Perform utf-8 validation on incoming will, subscription and unsubscription
    topics.
  * new $SYS/broker/store/messages/count (deprecates $SYS/broker/messages/stored)
  * new $SYS/broker/store/messages/bytes
  * max_queued_bytes feature to limit queues by real size rather than
    than just message count. Closes Eclipse #452919 or Github #100
  * Add support for bridges to be configured to only send notifications to the
    local broker.
  * Add set_tcp_nodelay option to allow Nagle's algorithm to be disabled on
    client sockets. Closes #433.
  * The behaviour of allow_anonymous has changed. In the old behaviour, the
    default if not set was to allow anonymous access. The new behaviour is to
    default is to allow anonymous access unless another security option is set.
    For example, if password_file is set and allow_anonymous is not set, then
    anonymous access will be denied. It is still possible to allow anonymous
    access by setting it explicitly.
  Broker fixes:
  * Fix UNSUBSCRIBE with no topic is accepted on MQTT 3.1.1. Closes #665.
  * Produce an error if two bridges share the same local_clientid.
  * Miscellaneous fixes on Windows.
  * queue_qos0_messages was not observing max_queued_** limits
  * When using the include_dir configuration option sort the files
    alphabetically before loading them.  Closes #17.
  * IPv6 is no longer disabled for websockets listeners.
  * Remove all build timestamp information including $SYS/broker/timestamp.
    Close #651.
  * Correctly handle incoming strings that contain a NULL byte. Closes #693.
  * Use constant time memcmp for password comparisons.
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Fix memory leak if a client provided a username/password for a listener with
    use_identity_as_username configured.
  * Fix use_identity_as_username not working on websockets clients.
  * Don't crash if an auth plugin returns MOSQ_ERR_AUTH for a username check on
    a websockets client. Closes #490.
  * Fix 08-ssl-bridge.py test when using async dns lookups. Closes #507.
  * Lines in the config file are no longer limited to 1024 characters long.
    Closes #652.
  * Fix $SYS counters of messages and bytes sent when message is sent over
    a Websockets. Closes #250.
  * Fix upgrade_outgoing_qos for retained message. Closes #534.
  * Fix CONNACK message not being sent for unauthorised connect on websockets.
    Closes #8.
  * Maximum connections on Windows increased to 2048.
  * When a client with an in-use client-id connects, if the old client has a
    will, send the will message. Closes #26.
  * Fix parsing of configuration options that end with a space. Closes #804.
  Client library features:
  * Outgoing messages with QoS&gt;1 are no longer retried after a timeout period.
    Messages will be retried when a client reconnects.
  * DNS-SRV support is now disabled by default.
  * Add mosquitto_subscribe_simple() This is a helper function to make
    retrieving messages from a broker very straightforward. Examples of its use
    are in examples/subscribe_simple.
  * Add mosquitto_subscribe_callback() This is a helper function to make
    processing messages from a broker very straightforward. An example of its use
    is in examples/subscribe_simple.
  * Connections now default to using MQTT v3.1.1.
  * Add mosquitto_validate_utf8() to check whether a string is valid UTF-8
    according to the UTF-8 spec and to the additional restrictions imposed by
    the MQTT spec.
  * Topic inputs are checked for UTF-8 validity.
  * Add mosquitto_userdata function to allow retrieving the client userdata
    member variable. Closes #111.
  * Add mosquitto_pub_topic_check2(), mosquitto_sub_topic_check2(), and
    mosquitto_topic_matches_sub2() which are identical to the similarly named
    functions but also take length arguments.
  * Add mosquitto_connect_with_flags_callback_set(), which allows a second
    connect callback to be used which also exposes the connect flags parameter.
    Closes #738 and #128.
  * Add MOSQ_OPT_SSL_CTX option to allow a user specified SSL_CTX to be used
    instead of the one generated by libmosquitto. This allows greater control
    over what options can be set. Closes #715.
  * Add MOSQ_OPT_SSL_CTX_WITH_DEFAULTS to work with MOSQ_OPT_SSL_CTX and have
    the default libmosquitto SSL_CTX configuration applied to the user provided
    SSL_CTX. Closes #567.
  Client library fixes:
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Initialise "result" variable as soon as possible in
    mosquitto_topic_matches_sub. Closes #654.
  * No need to close socket again if setting non-blocking failed. Closes #649.
  * Fix mosquitto_topic_matches_sub() not correctly matching foo/bar against
    foo/+/#. Closes #670.
  * SNI host support added.
  Client features:
  * Add -F to mosquitto_sub to allow the user to choose the output format.
  * Add -U to mosquitto_sub for unsubscribing from topics.
  * Add -c (clean session) to mosquitto_pub.
  * Add --retained-only to mosquitto_sub to exit after receiving all retained
    messages.
  * Add -W to allow mosquitto_sub to stop processing incoming messages after a
    timeout.
  * Connections now default to using MQTT v3.1.1.
  * Default to using port 8883 when using TLS.
  * mosquitto_sub doesn't continue to keep connecting if CONNACK tells it the
    connection was refused.
  Client fixes:
  * Correctly handle empty files with "mosquitto_pub -l". Closes #676.
  Build:
  * Add WITH_STRIP option (defaulting to "no") that when set to "yes" will strip
    executables and shared libraries when installing.
  * Add WITH_STATIC_LIBRARIES (defaulting to "no") that when set to "yes" will
    build and install static versions of the client libraries.
  * Don't run TLS-PSK tests if TLS-PSK disabled at compile time. Closes #636.
  * Support for openssl versions 1.0.0 and 1.0.1 has been removed as these are
    no longer supported by openssl.
  Documentation:
  * Replace mentions of deprecated 'c_rehash' with 'openssl rehash'.
- Remove patch:
  * mosquitto-1.4.12-use-SOURCE_DATE_EPOCH.patch (not longer needed)
- Support for tcp-wrapper is broken atm, disable for now</changelog>
  <changelog author="mardnh@gmx.de" date="1534680000">- Update to version 1.5.1
  Broker:
  * Fix plugin cleanup function not being called on exit of the broker.
  * Print more OpenSSL errors when loading certificates/keys fail.
  * Use AF_UNSPEC etc. instead of PF_UNSPEC to comply with POSIX.
  * Remove use of AI_ADDRCONFIG, which means the broker can be used on systems
    where only the loopback interface is defined.
  * Fix IPv6 addresses not being able to be used as bridge addresses.
  * All clients now time out if they exceed their keepalive*1.5, rather than
    just reach it. This was inconsistent in two places.
  * Fix segfault on startup if bridge CA certificates could not be read.
  * Fix problem opening listeners on Pi caused by unsigned char being default.
  * ACL patterns that do not contain either %c or %u now produce a warning in
    the log.
  * Fix bridge publishing failing when per_listener_settings was true.
  * Fix `use_identity_as_username true` not working.
  * Fix UNSUBACK messages not being logged.
  * Fix possible endian issue when reading the `memory_limit` option.
  * Fix building for libwebsockets &lt; 1.6.
  * Fix accessor functions for username and client id when used in plugin auth
    check.
  Library:
  * Fix some places where return codes were incorrect, including to the
    on_disconnect() callback. This has resulted in two new error codes,
    MOSQ_ERR_KEEPALIVE and MOSQ_ERR_LOOKUP.
  * Fix connection problems when mosquitto_loop_start() was called before
    mosquitto_connect_async().
  Clients:
  * When compiled using WITH_TLS=no, the default port was incorrectly being set
    to -1. This has been fixed.
  * Fix compiling on Mac OS X &lt;10.12.
  Build:
  * Fixes for building on NetBSD.
  * Fixes for building on FreeBSD.
  * Add support for compiling with static libwebsockets library.</changelog>
  <changelog author="mardnh@gmx.de" date="1540468800">- Update to version 1.5.3
  Security:
  * Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that
    begins with $, but is not $SYS, then an assert that should be unreachable is
    triggered and Mosquitto will exit.
  Broker:
  * Elevate log level to warning for situation when socket limit is hit.
  * Fix retained messages not sent by bridges on outgoing topics at the first
    connection.
  * Fix duplicate clients being added to by_id hash before the old client was
    removed.
- Update to version 1.5.2
  Broker:
  * Fix incorrect call to setsockopt() for TCP_NODELAY.
  * Fix excessive CPU usage when the number of sockets exceeds the system limit.
  * Fix round_robin false behaviour.
  * Fix segfault on HUP when bridges and security options are configured.
  Library:
  * Fix situation where username and password is used with SOCKS5 proxy.
  * Fix SOCKS5 behaviour when passing IP addresses.</changelog>
  <changelog author="mardnh@gmx.de" date="1545048000">- FIX CVE-2018-20145: mosquitto: ACL bypass (bnc#1119536)
- Update to version 1.5.5
  Security:
  * If `per_listener_settings` is set to true, then the `acl_file` setting was
    ignored for the "default listener" only. This has been fixed. This does not
    affect any listeners defined with the `listener` option.
  Broker:
  * Add `socket_domain` option to allow listeners to disable IPv6 support.
    This is required to work around a problem in libwebsockets that means
    sockets only listen on IPv6 by default if IPv6 support is compiled in.
  * When using ADNS, don't ask for all network protocols when connecting,
    because this can lead to confusing "Protocol not supported" errors if the
    network is down.
  * Fix outgoing retained messages not being sent by bridges on initial
    connection.
  * Don't reload auth_opt_ options on reload, to match the behaviour of the
    other plugin options.
  * Print message on error when installing/uninstalling as a Windows service.
  * All non-error connect/disconnect messages are controlled by the
    `connection_messages` option.
  Library:
  * Fix reconnect delay backoff behaviour.
  * Don't call on_disconnect() twice if keepalive tests fail.
  Client:
  * Always print leading zeros in mosquitto_sub when output format is hex.
  Build:
  * Fix building where TLS-PSK is not available.
- Update to version 1.5.4
  Security:
  * When using a TLS enabled websockets listener with "require_certificate"
    enabled, the mosquitto broker does not correctly verify client certificates.
    This is now fixed. All other security measures operate as expected, and in
    particular non-websockets listeners are not affected by this.
  Broker:
  * Process all pending messages even when a client has disconnected. This means
    a client that send a PUBLISH then DISCONNECT quickly, then disconnects will
    have its DISCONNECT message processed properly and so no Will will be sent.
  * $SYS/broker/clients/disconnected should never be negative.
  * Give better error message if a client sends a password without a username.
  * Fix bridge not honoring restart_timeout.
  * Don't disconnect a client if an auth plugin denies access to SUBSCRIBE.
  Library:
  * Fix memory leak that occurred if mosquitto_reconnect() was used when TLS
    errors were present.
  * Fix TLS connections when using an external event loop with
    mosquitto_loop_read() and mosquitto_write().
  Build:
  * Fix clients not being compiled with threading support when using CMake.
  * Use _GNU_SOURCE to fix build errors in websockets and getaddrinfo usage.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550059200">- Update to version 1.5.6
  Security:
  * Fix CVE-2018-12551 (bsc#1125021): If Mosquitto is configured to
    use a password file for authentication, any malformed data in
    the password file will be treated as valid. This typically means
    that the malformed data becomes a username and no password.
    If this occurs, clients can circumvent authentication and get
    access to the broker by using the malformed username. In
    particular, a blank line will be treated as a valid empty username.
    Other security measures are unaffected. Users who have only used
    the mosquitto_passwd utility to create and modify their password
    files are unaffected by this vulnerability.
  * Fix CVE-2018-12550 (bsc#1125021): If an ACL file is empty, or
    has only blank lines or comments, then mosquitto treats the ACL
    file as not being defined, which means that no topic access is
    denied. Although denying access to all topics is not a useful
    configuration, this behaviour is unexpected and could lead
    to access being incorrectly granted in some circumstances. This
    is now fixed.
  * Fix CVE-2018-12546 (bsc#1125019): If a client publishes a retained
    message to a topic that they have access to, and then their access
    to that topic is revoked, the retained message will still be
    delivered to future subscribers. This behaviour may be undesirable
    in some applications, so a configuration option `check_retain_source`
    has been introduced to enforce checking of the retained message
    source on publish.
  Broker:
  * Fixed comment handling for config options that have optional
    arguments.
  * Improved documentation around bridge topic remapping.
  * Handle mismatched handshakes (e.g. QoS1 PUBLISH with QoS2
    reply) properly.
  * Fix spaces not being allowed in the bridge remote_username
    option.
  * Allow broker to always restart on Windows when using
    `log_dest file`.
  * Fix Will not being sent for Websockets clients.
  * Windows: Fix possible crash when client disconnects.
  * Fixed durable clients being unable to receive messages when
    offline, when per_listener_settings was set to true.
  * Add log message for the case where a client is disconnected for
    sending a topic with invalid UTF-8.
  Library:
  * Fix TLS connections not working over SOCKS.
  * Don't clear SSL context when TLS connection is closed, meaning
    if a user provided an external SSL_CTX they have less chance of
    leaking references.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550145600">- Update to version 1.5.7
  Broker:
  - Ensure that an error occurs if `per_listener_settings true` is
    given after other security options.
  - Fix case where old unreferenced msg_store messages were being
    saved to the persistence file, bloating its size unnecessarily.
  Library:
  - Fix `mosquitto_topic_matches_sub()` not returning MOSQ_ERR_INVAL
    for invalid subscriptions like `topic/#abc`. This only affects
    the return value, not the match/no match result, which was
    already correct.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550491200">- Use HTTPS for all URLs
- Verify source signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569067200">- Add patch to fix security issue: CVE-2019-11779
  * mosquitto-1.5.x-cve-2019-11779.patch</changelog>
</package>
<package pkgid="d050eafdb426f56df783ab496d1c08fe23e4b07681d108721aa7b207faa16708" name="libmosquittopp1" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1449662400">- enabled tcp wrapper support</changelog>
  <changelog author="mrueckert@suse.de" date="1449662401">- enable websocket supports</changelog>
  <changelog author="mrueckert@suse.de" date="1455192000">- update to 1.4.7
  - Broker:
  - Fix support for libwebsockets 1.22.
- changes from 1.4.6
  - Broker:
  - Add support for libwebsockets 1.6.
  - Client library:
  - Fix _mosquitto_socketpair() on Windows, reducing the chance
    of delays when publishing. Closes #483979.
  - Clients:
  - Fix "mosquitto_pub -l" stripping the final character on a
    line. Closes #483981.</changelog>
  <changelog author="mrueckert@suse.de" date="1459166400">- update to 1.4.8
  - Broker:
  - Wills published by clients connected to a listener with
    mount_point defined now correctly obey the mount point. This
    was a potential security risk because it allowed clients to
    publish messages outside of their restricted mount point.
    This is only affects brokers where the mount_point option is
    in use. Closes #487178.
  - Fix detection of broken connections on Windows.
    Closes #485143.
  - Close stdin etc. when daemonised. Closes #485589.
  - Fix incorrect detection of FreeBSD and OpenBSD.
    Closes #485131.
  - Client library:
  - mosq-&gt;want_write should be cleared immediately before a call
    to SSL_write, to allow clients using mosquitto_want_write()
    to get accurate results.</changelog>
  <changelog author="mrueckert@suse.de" date="1467115200">- update to 1.4.9
  - Broker:
  - Ensure websockets clients that previously connected with
    clean session set to false have their queued messages
    delivered immediately on reconnecting.  Closes #476314.
  - Reconnecting client with clean session set to false doesn't
    start with mid=1 again.
  - Will topic isn't truncated by one byte when using a
    mount_point any more.
  - Network errors are printed correctly on Windows.
  - Fix incorrect $SYS heap memory reporting when using ACLs.
  - Bridge config parameters couldn't contain a space, this has
    been fixed.  Closes #150.
  - Fix saving of persistence messages that start with a '/'.
    Closes #151.
  - Fix reconnecting for bridges that use TLS on Windows. Closes
    [#154].
  - Broker and bridges can now cope with unknown incoming PUBACK,
    PUBREC, PUBREL, PUBCOMP without disconnecting. Closes #57.
  - Fix websockets listeners not being able to bind to an IP
    address. Closes #170.
  - mosquitto_passwd utility now correctly deals with unknown
    command line arguments in all cases. Closes #169.
  - Fix publishing of $SYS/broker/clients/maximum
  - Fix order of #includes in lib/send_mosq.c to ensure struct
    mosquitto doesn't differ between source files when websockets
    is being used. Closes #180.
  - Fix possible rare crash when writing out persistence file and
    a client has incomplete messages inflight that it has been
    denied the right to publish.
  - Client library:
  - Fix the case where a message received just before the
    keepalive timer expired would cause the client to miss the
    keepalive timer.
  - Return value of pthread_create is now checked.
  - _mosquitto_destroy should not cancel threads that weren't
    created by libmosquitto. Closes #166.
  - Clients can now cope with unknown incoming PUBACK, PUBREC,
    PUBREL, PUBCOMP without disconnecting. Closes #57.
  - Fix mosquitto_topic_matches_sub() reporting matches on some
    invalid subscriptions.
  - Clients:
  - Handle some unchecked malloc() calls. Closes #1.
  - Build:
  - Fix string quoting in CMakeLists.txt. Closes #4.
  - Fix building on Visual Studio 2015. Closes #136.</changelog>
  <changelog author="mrueckert@suse.de" date="1489924800">- update to 1.4.11
  - Broker:
  - Fix crash when "lazy" type bridge attempts to reconnect.
    Closes #259.
  - maximum_connections now applies to websockets listeners.
    Closes #271.
  - Allow bridges to use TLS with IPv6.
  - Don't error on zero length persistence files. Closes #316.
  - For http only websockets clients, close files served over
    http in all cases when the client disconnects. Closes #354.
  - Fix error message when websockets http_dir directory does not
    exist.
  - Improve password utility error message. Closes #379.
  - Clients:
  - Use of --ciphers no longer requires you to also pass
  - -tls-version.  Closes #380.
  - Client library:
  - Clients can now use TLS with IPv6.
  - Fix potential socket leakage when reconnecting. Closes #304.
  - Fix potential negative timeout being passed to pselect.
    Closes #329.
- update 1.4.10
  - Broker:
  - Fix TLS operation with websockets listeners and libwebsockts
    2.x. Closes #186.
  - Don't disconnect client on HUP before reading the pending
    data. Closes #7.
  - Fix some $SYS messages being incorrectly persisted. Closes
    [#191].
  - Support OpenSSL 1.1.0.
  - Call fsync after persisting data to ensure it is correctly
    written. Closes #189.
  - Fix persistence saving of subscription QoS on big-endian
    machines.
  - Fix will retained flag handling on Windows. Closes #222.
  - Broker now displays an error if it is unable to open the log
    file. Closes #234.
  - Client library:
  - Support OpenSSL 1.1.0.
  - Fixed the C++ library not allowing SOCKS support to be used.
    Closes #198.
  - Fix memory leak when verifying a server certificate with a
    subjectAltName section. Closes #237.
  - Build:
  - Don't attempt to install docs when WITH_DOCS=no. Closes #184.</changelog>
  <changelog author="mardnh@gmx.de" date="1496059200">- Update to 1.4.12
  * Security:
  - Fix CVE-2017-7650, which allows clients with username or
    client id set to '#' or '+' to bypass pattern based ACLs or
    third party plugins. The fix denies message sending or
    receiving of messages for clients with a '#' or '+' in their
    username or client id and if the message is subject to a
    pattern ACL check or plugin check.
  * Broker:
  - Fix mosquitto.db from becoming corrupted due to client
    messages being
    persisted with no stored message. Closes #424.
  - Fix bridge not restarting properly. Closes #428.
  - Fix unitialized memory in gets_quiet on Windows. Closes #426.
  - Fix building with WITH_ADNS=no for systems that don't use
    glibc. Closes #415.
  - Fixes to readme.md.
  - Fix deprecation warning for OpenSSL 1.1. PR #416.
  - Don't segfault on duplicate bridge names. Closes #446.
  - Fix CVE-2017-7650.</changelog>
  <changelog author="mardnh@gmx.de" date="1499256000">- Update to 1.4.13
  * Security:
  - Fix CVE-2017-9868. The persistence file was readable
    by all local users, potentially allowing sensitive
    information to be leaked.
    This can also be fixed administratively, by restricting
    access to the directory in which the persistence file
    is stored.
  * Broker:
  - Fix for poor websockets performance.
  - Fix lazy bridges not timing out for idle_timeout.
  - Fix problems with large retained messages over websockets.
  - Set persistence file to only be readable by owner,
    except on Windows.
  - Fix CONNECT check for reserved=0, as per MQTT v3.1.1
    check MQTT-3.1.2-3.
  - When the broker stop, wills for any connected clients
    are now "sent".
  - Auth plugins can be configured to disable the check for +# in
    usernames/client ids with the auth_plugin_deny_special_chars
    option.  Partially closes #462.
  - Restrictions for CVE-2017-7650 have been relaxed - '/' is
    allowed in usernames/client ids. Remainder of fix for #462.
  Clients:
  - Don't use / in auto-generated client ids.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1499428800">- Add mosquitto-1.4.12-use-SOURCE_DATE_EPOCH.patch: Determine build
  timestamp from latest revision of .changes file in order to make
  the build reproducible and avoid useless republishing.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Fix incorrect RPM groups.
- Remove repeated license declaration from description.
  Trim package descriptions for size.
- Errors from user creation must not be ignored.</changelog>
  <changelog author="mardnh@gmx.de" date="1506945600">- Update to 1.4.14
  * Broker:
  - Fix regression from 1.4.13 where persistence data was not
    being saved.</changelog>
  <changelog author="mardnh@gmx.de" date="1519905600">- Update to version 1.4.15
  Security:
  * Fix CVE-2017-7652. If a SIGHUP is sent to the broker when there are no more
    file descriptors, then opening the configuration file will fail and security
    settings will be set back to their default values.
  * Fix CVE-2017-7651. Unauthenticated clients can cause excessive memory use by
    setting "remaining length" to be a large value. This is now mitigated by
    limiting the size of remaining length to valid values. A "memory_limit"
    configuration option has also been added to allow the overall memory used by
    the broker to be limited.
  Broker:
  * Use constant time memcmp for password comparisons.
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Fix memory leak if a client provided a username/password for a listener with
    use_identity_as_username configured.
  * Fix use_identity_as_username not working on websockets clients.
  * Don't crash if an auth plugin returns MOSQ_ERR_AUTH for a username check on
    a websockets client. Closes #490.
  * Fix 08-ssl-bridge.py test when using async dns lookups. Closes #507.
  * Lines in the config file are no longer limited to 1024 characters long.
    Closes #652.
  * Fix $SYS counters of messages and bytes sent when message is sent over
    a Websockets. Closes #250.
  * Fix upgrade_outgoing_qos for retained message. Closes #534.
  * Fix CONNACK message not being sent for unauthorised connect on websockets.
    Closes #8.
  Client library:
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Initialise "result" variable as soon as possible in
    mosquitto_topic_matches_sub. Closes #654.
  * No need to close socket again if setting non-blocking failed. Closes #649.
  * Fix mosquitto_topic_matches_sub() not correctly matching foo/bar against
    foo/+/#. Closes #670.
  Clients:
  * Correctly handle empty files with "mosquitto_pub -l". Closes #676.
  Build:
  * Don't run TLS-PSK tests if TLS-PSK disabled at compile time. Closes #636.</changelog>
  <changelog author="mardnh@gmx.de" date="1525348800">- Update to version 1.5
  Security:
  * Fix memory leak that could be caused by a malicious CONNECT packet. This
    does not yet have a CVE assigned. Closes #533493 (on Eclipse bugtracker)
  Broker features:
  * Add per_listener_settings to allow authentication and access control to be
    per listener.
  * Add limited support for reloading listener settings. This allows settings
    for an already defined listener to be reloaded, but port numbers must not be
    changed.
  * Add ability to deny access to SUBSCRIBE messages as well as the current
    read/write accesses. Currently for auth plugins only.
  * Reduce calls to malloc through the use of UHPA.
  * Outgoing messages with QoS&gt;1 are no longer retried after a timeout period.
    Messages will be retried when a client reconnects.  This change in behaviour
    can be justified by considering when the timeout may have occurred.
    + If a connection is unreliable and has dropped, but without one end
    noticing, the messages will be retried on reconnection. Sending
    additional PUBLISH or PUBREL would not have changed anything.
    + If a client is overloaded/unable to respond/has a slow connection then
    sending additional PUBLISH or PUBREL would not help the client catch
    up. Once the backlog has cleared the client will respond. If it is not
    able to catch up, sending additional duplicates would not help either.
  * Add use_subject_as_username option for certificate based client
    authentication to use the entire certificate subject as a username, rather
    than just the CN. Closes #469467.
  * Change sys tree printing output. This format shouldn't be relied upon and
    may change at any time. Closes #470246.
  * Minimum supported libwebsockets version is now 1.3.
  * Add systemd startup notification and services. Closes #471053.
  * Reduce unnecessary malloc and memcpy when receiving a message and storing
    it. Closes #470258.
  * Support for Windows XP has been dropped.
  * Bridge connections now default to using MQTT v3.1.1.
  * mosquitto_db_dump tool can now output some stats on clients.
  * Perform utf-8 validation on incoming will, subscription and unsubscription
    topics.
  * new $SYS/broker/store/messages/count (deprecates $SYS/broker/messages/stored)
  * new $SYS/broker/store/messages/bytes
  * max_queued_bytes feature to limit queues by real size rather than
    than just message count. Closes Eclipse #452919 or Github #100
  * Add support for bridges to be configured to only send notifications to the
    local broker.
  * Add set_tcp_nodelay option to allow Nagle's algorithm to be disabled on
    client sockets. Closes #433.
  * The behaviour of allow_anonymous has changed. In the old behaviour, the
    default if not set was to allow anonymous access. The new behaviour is to
    default is to allow anonymous access unless another security option is set.
    For example, if password_file is set and allow_anonymous is not set, then
    anonymous access will be denied. It is still possible to allow anonymous
    access by setting it explicitly.
  Broker fixes:
  * Fix UNSUBSCRIBE with no topic is accepted on MQTT 3.1.1. Closes #665.
  * Produce an error if two bridges share the same local_clientid.
  * Miscellaneous fixes on Windows.
  * queue_qos0_messages was not observing max_queued_** limits
  * When using the include_dir configuration option sort the files
    alphabetically before loading them.  Closes #17.
  * IPv6 is no longer disabled for websockets listeners.
  * Remove all build timestamp information including $SYS/broker/timestamp.
    Close #651.
  * Correctly handle incoming strings that contain a NULL byte. Closes #693.
  * Use constant time memcmp for password comparisons.
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Fix memory leak if a client provided a username/password for a listener with
    use_identity_as_username configured.
  * Fix use_identity_as_username not working on websockets clients.
  * Don't crash if an auth plugin returns MOSQ_ERR_AUTH for a username check on
    a websockets client. Closes #490.
  * Fix 08-ssl-bridge.py test when using async dns lookups. Closes #507.
  * Lines in the config file are no longer limited to 1024 characters long.
    Closes #652.
  * Fix $SYS counters of messages and bytes sent when message is sent over
    a Websockets. Closes #250.
  * Fix upgrade_outgoing_qos for retained message. Closes #534.
  * Fix CONNACK message not being sent for unauthorised connect on websockets.
    Closes #8.
  * Maximum connections on Windows increased to 2048.
  * When a client with an in-use client-id connects, if the old client has a
    will, send the will message. Closes #26.
  * Fix parsing of configuration options that end with a space. Closes #804.
  Client library features:
  * Outgoing messages with QoS&gt;1 are no longer retried after a timeout period.
    Messages will be retried when a client reconnects.
  * DNS-SRV support is now disabled by default.
  * Add mosquitto_subscribe_simple() This is a helper function to make
    retrieving messages from a broker very straightforward. Examples of its use
    are in examples/subscribe_simple.
  * Add mosquitto_subscribe_callback() This is a helper function to make
    processing messages from a broker very straightforward. An example of its use
    is in examples/subscribe_simple.
  * Connections now default to using MQTT v3.1.1.
  * Add mosquitto_validate_utf8() to check whether a string is valid UTF-8
    according to the UTF-8 spec and to the additional restrictions imposed by
    the MQTT spec.
  * Topic inputs are checked for UTF-8 validity.
  * Add mosquitto_userdata function to allow retrieving the client userdata
    member variable. Closes #111.
  * Add mosquitto_pub_topic_check2(), mosquitto_sub_topic_check2(), and
    mosquitto_topic_matches_sub2() which are identical to the similarly named
    functions but also take length arguments.
  * Add mosquitto_connect_with_flags_callback_set(), which allows a second
    connect callback to be used which also exposes the connect flags parameter.
    Closes #738 and #128.
  * Add MOSQ_OPT_SSL_CTX option to allow a user specified SSL_CTX to be used
    instead of the one generated by libmosquitto. This allows greater control
    over what options can be set. Closes #715.
  * Add MOSQ_OPT_SSL_CTX_WITH_DEFAULTS to work with MOSQ_OPT_SSL_CTX and have
    the default libmosquitto SSL_CTX configuration applied to the user provided
    SSL_CTX. Closes #567.
  Client library fixes:
  * Fix incorrect PSK key being used if it had leading zeroes.
  * Initialise "result" variable as soon as possible in
    mosquitto_topic_matches_sub. Closes #654.
  * No need to close socket again if setting non-blocking failed. Closes #649.
  * Fix mosquitto_topic_matches_sub() not correctly matching foo/bar against
    foo/+/#. Closes #670.
  * SNI host support added.
  Client features:
  * Add -F to mosquitto_sub to allow the user to choose the output format.
  * Add -U to mosquitto_sub for unsubscribing from topics.
  * Add -c (clean session) to mosquitto_pub.
  * Add --retained-only to mosquitto_sub to exit after receiving all retained
    messages.
  * Add -W to allow mosquitto_sub to stop processing incoming messages after a
    timeout.
  * Connections now default to using MQTT v3.1.1.
  * Default to using port 8883 when using TLS.
  * mosquitto_sub doesn't continue to keep connecting if CONNACK tells it the
    connection was refused.
  Client fixes:
  * Correctly handle empty files with "mosquitto_pub -l". Closes #676.
  Build:
  * Add WITH_STRIP option (defaulting to "no") that when set to "yes" will strip
    executables and shared libraries when installing.
  * Add WITH_STATIC_LIBRARIES (defaulting to "no") that when set to "yes" will
    build and install static versions of the client libraries.
  * Don't run TLS-PSK tests if TLS-PSK disabled at compile time. Closes #636.
  * Support for openssl versions 1.0.0 and 1.0.1 has been removed as these are
    no longer supported by openssl.
  Documentation:
  * Replace mentions of deprecated 'c_rehash' with 'openssl rehash'.
- Remove patch:
  * mosquitto-1.4.12-use-SOURCE_DATE_EPOCH.patch (not longer needed)
- Support for tcp-wrapper is broken atm, disable for now</changelog>
  <changelog author="mardnh@gmx.de" date="1534680000">- Update to version 1.5.1
  Broker:
  * Fix plugin cleanup function not being called on exit of the broker.
  * Print more OpenSSL errors when loading certificates/keys fail.
  * Use AF_UNSPEC etc. instead of PF_UNSPEC to comply with POSIX.
  * Remove use of AI_ADDRCONFIG, which means the broker can be used on systems
    where only the loopback interface is defined.
  * Fix IPv6 addresses not being able to be used as bridge addresses.
  * All clients now time out if they exceed their keepalive*1.5, rather than
    just reach it. This was inconsistent in two places.
  * Fix segfault on startup if bridge CA certificates could not be read.
  * Fix problem opening listeners on Pi caused by unsigned char being default.
  * ACL patterns that do not contain either %c or %u now produce a warning in
    the log.
  * Fix bridge publishing failing when per_listener_settings was true.
  * Fix `use_identity_as_username true` not working.
  * Fix UNSUBACK messages not being logged.
  * Fix possible endian issue when reading the `memory_limit` option.
  * Fix building for libwebsockets &lt; 1.6.
  * Fix accessor functions for username and client id when used in plugin auth
    check.
  Library:
  * Fix some places where return codes were incorrect, including to the
    on_disconnect() callback. This has resulted in two new error codes,
    MOSQ_ERR_KEEPALIVE and MOSQ_ERR_LOOKUP.
  * Fix connection problems when mosquitto_loop_start() was called before
    mosquitto_connect_async().
  Clients:
  * When compiled using WITH_TLS=no, the default port was incorrectly being set
    to -1. This has been fixed.
  * Fix compiling on Mac OS X &lt;10.12.
  Build:
  * Fixes for building on NetBSD.
  * Fixes for building on FreeBSD.
  * Add support for compiling with static libwebsockets library.</changelog>
  <changelog author="mardnh@gmx.de" date="1540468800">- Update to version 1.5.3
  Security:
  * Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that
    begins with $, but is not $SYS, then an assert that should be unreachable is
    triggered and Mosquitto will exit.
  Broker:
  * Elevate log level to warning for situation when socket limit is hit.
  * Fix retained messages not sent by bridges on outgoing topics at the first
    connection.
  * Fix duplicate clients being added to by_id hash before the old client was
    removed.
- Update to version 1.5.2
  Broker:
  * Fix incorrect call to setsockopt() for TCP_NODELAY.
  * Fix excessive CPU usage when the number of sockets exceeds the system limit.
  * Fix round_robin false behaviour.
  * Fix segfault on HUP when bridges and security options are configured.
  Library:
  * Fix situation where username and password is used with SOCKS5 proxy.
  * Fix SOCKS5 behaviour when passing IP addresses.</changelog>
  <changelog author="mardnh@gmx.de" date="1545048000">- FIX CVE-2018-20145: mosquitto: ACL bypass (bnc#1119536)
- Update to version 1.5.5
  Security:
  * If `per_listener_settings` is set to true, then the `acl_file` setting was
    ignored for the "default listener" only. This has been fixed. This does not
    affect any listeners defined with the `listener` option.
  Broker:
  * Add `socket_domain` option to allow listeners to disable IPv6 support.
    This is required to work around a problem in libwebsockets that means
    sockets only listen on IPv6 by default if IPv6 support is compiled in.
  * When using ADNS, don't ask for all network protocols when connecting,
    because this can lead to confusing "Protocol not supported" errors if the
    network is down.
  * Fix outgoing retained messages not being sent by bridges on initial
    connection.
  * Don't reload auth_opt_ options on reload, to match the behaviour of the
    other plugin options.
  * Print message on error when installing/uninstalling as a Windows service.
  * All non-error connect/disconnect messages are controlled by the
    `connection_messages` option.
  Library:
  * Fix reconnect delay backoff behaviour.
  * Don't call on_disconnect() twice if keepalive tests fail.
  Client:
  * Always print leading zeros in mosquitto_sub when output format is hex.
  Build:
  * Fix building where TLS-PSK is not available.
- Update to version 1.5.4
  Security:
  * When using a TLS enabled websockets listener with "require_certificate"
    enabled, the mosquitto broker does not correctly verify client certificates.
    This is now fixed. All other security measures operate as expected, and in
    particular non-websockets listeners are not affected by this.
  Broker:
  * Process all pending messages even when a client has disconnected. This means
    a client that send a PUBLISH then DISCONNECT quickly, then disconnects will
    have its DISCONNECT message processed properly and so no Will will be sent.
  * $SYS/broker/clients/disconnected should never be negative.
  * Give better error message if a client sends a password without a username.
  * Fix bridge not honoring restart_timeout.
  * Don't disconnect a client if an auth plugin denies access to SUBSCRIBE.
  Library:
  * Fix memory leak that occurred if mosquitto_reconnect() was used when TLS
    errors were present.
  * Fix TLS connections when using an external event loop with
    mosquitto_loop_read() and mosquitto_write().
  Build:
  * Fix clients not being compiled with threading support when using CMake.
  * Use _GNU_SOURCE to fix build errors in websockets and getaddrinfo usage.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550059200">- Update to version 1.5.6
  Security:
  * Fix CVE-2018-12551 (bsc#1125021): If Mosquitto is configured to
    use a password file for authentication, any malformed data in
    the password file will be treated as valid. This typically means
    that the malformed data becomes a username and no password.
    If this occurs, clients can circumvent authentication and get
    access to the broker by using the malformed username. In
    particular, a blank line will be treated as a valid empty username.
    Other security measures are unaffected. Users who have only used
    the mosquitto_passwd utility to create and modify their password
    files are unaffected by this vulnerability.
  * Fix CVE-2018-12550 (bsc#1125021): If an ACL file is empty, or
    has only blank lines or comments, then mosquitto treats the ACL
    file as not being defined, which means that no topic access is
    denied. Although denying access to all topics is not a useful
    configuration, this behaviour is unexpected and could lead
    to access being incorrectly granted in some circumstances. This
    is now fixed.
  * Fix CVE-2018-12546 (bsc#1125019): If a client publishes a retained
    message to a topic that they have access to, and then their access
    to that topic is revoked, the retained message will still be
    delivered to future subscribers. This behaviour may be undesirable
    in some applications, so a configuration option `check_retain_source`
    has been introduced to enforce checking of the retained message
    source on publish.
  Broker:
  * Fixed comment handling for config options that have optional
    arguments.
  * Improved documentation around bridge topic remapping.
  * Handle mismatched handshakes (e.g. QoS1 PUBLISH with QoS2
    reply) properly.
  * Fix spaces not being allowed in the bridge remote_username
    option.
  * Allow broker to always restart on Windows when using
    `log_dest file`.
  * Fix Will not being sent for Websockets clients.
  * Windows: Fix possible crash when client disconnects.
  * Fixed durable clients being unable to receive messages when
    offline, when per_listener_settings was set to true.
  * Add log message for the case where a client is disconnected for
    sending a topic with invalid UTF-8.
  Library:
  * Fix TLS connections not working over SOCKS.
  * Don't clear SSL context when TLS connection is closed, meaning
    if a user provided an external SSL_CTX they have less chance of
    leaking references.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550145600">- Update to version 1.5.7
  Broker:
  - Ensure that an error occurs if `per_listener_settings true` is
    given after other security options.
  - Fix case where old unreferenced msg_store messages were being
    saved to the persistence file, bloating its size unnecessarily.
  Library:
  - Fix `mosquitto_topic_matches_sub()` not returning MOSQ_ERR_INVAL
    for invalid subscriptions like `topic/#abc`. This only affects
    the return value, not the match/no match result, which was
    already correct.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1550491200">- Use HTTPS for all URLs
- Verify source signature</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569067200">- Add patch to fix security issue: CVE-2019-11779
  * mosquitto-1.5.x-cve-2019-11779.patch</changelog>
</package>
<package pkgid="bae81e9600fbf7f71f80373a24987be710112a32ba501e7562bebca31c67ffff" name="libmount-devel" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="96dbb0080663ebd8770fb273dd666ad152106743c4f06d09148a02cea0137d30" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="d0aa35323b3869376f374ae93fc7a6d30425afca5b48feaf17043154f896ffd5" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="2e164a1652b2a5eb33b907da5db2005fc7d7dd9407b75cb3051960dee56ae5e5" name="libmount-devel-static" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="5e728e434f63de6588c7d878a6ec15a79efc3d1d2da5f53ebc7469c70b4ccc4b" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="d2657aa3e951e65f155108b16066459f68eb6a6a3f8a9dea7a36b35ef5d85fd1" name="libmount1" arch="i586">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="3c49b870f2ca7f37a6e4ffc713cb6bfe7396411f60aad269ddd2845bba26a0bf" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="593b5ecab961111fc7d80138a2190c5daf9bdd9a84da6222b4980e22db181d85" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="lp151.3.3.2"/>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1530619200">- Switch python-libmount to python3-libmount.</changelog>
  <changelog author="sbrabec@suse.com" date="1539345600">- Create empty /etc/issue.d for the new agetty feature.</changelog>
  <changelog author="sbrabec@suse.com" date="1540555200">- Fix runstatedir path (to /run) (boo#1113188#c1).</changelog>
  <changelog author="sbrabec@suse.com" date="1542628800">- Update to version 2.33 (FATE#326844):
  * choom: new command to adjust and display the current OOM-killer
    score.
  * libsmartcols has been improved to differentiate between
    numbers, booleans and strings in JSON output.
  * fstrim(8): trim all mounted filesystems from /etc/fstab
    (-A|--fstab), new command line option --dry-run.
  * hwclock(8) new command line option --delay.
  * mount umount, libmount allow to mount and umount filesystem in
    another namespace.
  * rename(1) new command line option --interactive.
  * setarch(8) does not require architecture when modify
    personality like ADDR_NO_RANDOMIZE. The architecture argument
    is optional now.
  * command su(1) new command line option --whitelist-environment.
  * setpriv(1) new command line option --reset-env and --pdeathsig.
  * fdisk(8), sfdisk(8): print disk model name to simplify device
    identification.
  * column --table-empty-lines" allows to use empty lines in
    formatted output.
  * wipefs improved to postpone BLKRRPART ioctl until all magic
    strings are wiped.
  * script(1) extended to store more information about terminal
    size and type to the typescript header. New command line
    option --output-limit.
  * libblkid provides BitLocker and basic APFS detection now.
  * lsblk is possible to execute against /sys and /proc dumps with
  - -sysroot is specified.
  * agetty(8) reload issue only if it is really needed
    (bsc#1085196).
  * cal(1) has been improved and extended.
  * libblkid has been extended to support LUKS2, Micron mpool, VDO
    and Atari partition table.
  * rfkill(8) has been moved to /usr/sbin.
  * dmesg(1) provides better support for multi-line messages, new
    command line option --force-prefix.
  * fallocate(1) --dig-holes is faster and more effect now.
  * fdisk(8) provides access to Protective MBR accessible from main
    menu. Sun label support has been improved.
  * lscpu(1) provides more details about ARM CPUs now
    (FATE#326453).
  * lsmem(1) supports memory zone awareness now (FATE#324252,
    drop util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  * lsns(8) provides netnsid and nsfs columns now.
  * rtcwake(8) waits stdin to settle down before entering a system
    sleep.
  * Many fixes and improvements, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33-ReleaseNotes
    (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
    util-linux-fincore-count.patch,
    util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
    util-linux-libmount-umount-a-segfault.patch,
    util-linux-libmount-mount-a-nfs-bind-mount.patch,
    util-linux-lscpu-chcpu-new-cpu-macros.patch,
    util-linux-chcpu-cpu-count.patch,
    util-linux-bash-completion-umount-CVE-2018-7738.patch).
- agetty: Fixes for reload issue only if it is really needed
  (bsc#1085196, util-linux-agetty-smart-reload-10.patch,
  util-linux-agetty-smart-reload-11.patch,
  util-linux-agetty-smart-reload-12.patch).
- agetty BEHAVIOR CHANGE: Terminal switches to character mode when
  entering logname; echo is generated by the agetty itself.
  (In past, logname echo was generated locally by the terminal,
  using the canonical line editing mode.)</changelog>
  <changelog author="sbrabec@suse.com" date="1544443200">- Drop rfkill-block@.service and rfkill-unblock@.service that
  functionally conflict with systemd-rfkill@.service
  (boo#1092820#c13).</changelog>
  <changelog author="sbrabec@suse.com" date="1548158400">- Update to version 2.33.1:
  * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).
  * Other minor fixes and documentation updates.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549022400">- libmount: print a blacklist hint for "unknown filesystem type"
  (jsc#SUSE-4085, fate#326832), and add documentation
  * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
  * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1551700800">- Integrate pam_keyinit pam module to login
  (boo#1081947, login.pamd, remote.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1556798400">- Fix problems in reading of login.defs values (bsc#1121197,
  util-linux-login_defs-priority1.patch,
  util-linux-login_defs-priority2.patch,
  util-linux-login_defs-SYS_UID.patch).
- Perform one-time reset of /etc/default/su (bsc#1121197).</changelog>
  <changelog author="sbrabec@suse.com" date="1560513600">- agetty: Return previous response of agetty for special characters
  (bsc#1085196, bsc#1125886,
  util-linux-agetty-smart-reload-13.patch,
  util-linux-agetty-smart-reload-14.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1560859200">- raw.service: Add RemainAfterExit=yes (bsc#1135534).</changelog>
  <changelog author="sbrabec@suse.com" date="1561982400">- Fix license of libraries: LGPL-2.1-or-later and BSD-3-Clause for
  libuuid (bsc#1135708).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673600">- libmount: To prevent incorrect behavior, recognize more pseudofs
  and netfs (bsc#1122417, util-linux-libmount-pseudofs.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1562673601">- De-duplicate fstrim -A properly (bsc#1127701,
  util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
  util-linux-fstrim-A-4.patch).
- Do not trim read-only volumes
  (boo#1106214, util-linux-fstrim-A-2.patch,
  util-linux-fstrim-A-4.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1563796800">- Fix /etc/default/su comments and create /etc/default/runuser
  (bsc#1121197#31).
- Remove /etc/default/su migration from coreutils.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1565092800">- Issue a warning for outdated pam files
  (bsc#1082293, boo#1081947#c68).
- Fix comments and unify look of PAM files that were just changed
  (login.pamd, remote.pamd).</changelog>
</package>
<package pkgid="1068f59774caa8d4e10f85068133ae211227e760e25be8ae73f86461a7757e89" name="libmutter-1-0" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="bc2cece7b2cc1ae3d629f3f33ef77f3fb743b157317ecfe03987a3d43693061c" name="libmysqlcppconn-devel" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.4.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="b4dcb3cbb9377ac5237bdbc0236df1194e9134296f2b84de1626230062ddd54f" name="libmysqlcppconn7" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="lp151.4.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="266ce021e7f26da70117ed7ef288847d9184ee206dc9b18a299bdc72b9ae7845" name="libmysqld-devel" arch="i586">
  <version epoch="0" ver="10.2.25" rel="lp151.2.3.1"/>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
</package>
<package pkgid="d0e8341fe8c085a2b1b5dd60a7ec3cfe5b0740132d2f67d4a29b0a11b46db5bd" name="libmysqld-devel" arch="x86_64">
  <version epoch="0" ver="10.2.25" rel="lp151.2.3.1"/>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
</package>
<package pkgid="efc083fcc63c12701c8cc18b82b72c63977549d6bf67189290316f68ba585767" name="libmysqld-devel" arch="i586">
  <version epoch="0" ver="10.2.25" rel="lp151.2.6.1"/>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1565179200">- adjust mysql-systemd-helper ("shutdown protected MySQL" section)
  so it checks both ping response and the pid in a process list
  as it can take some time till the process is terminated.
  Otherwise it can lead to "found left-over process" situation
  when regular mariadb is started [bsc#1143215]</changelog>
</package>
<package pkgid="b86c609fa363aa33cd1c6e45b9e65cdff1898850c993ccc13ca58f55208eab1c" name="libmysqld-devel" arch="x86_64">
  <version epoch="0" ver="10.2.25" rel="lp151.2.6.1"/>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1565179200">- adjust mysql-systemd-helper ("shutdown protected MySQL" section)
  so it checks both ping response and the pid in a process list
  as it can take some time till the process is terminated.
  Otherwise it can lead to "found left-over process" situation
  when regular mariadb is started [bsc#1143215]</changelog>
</package>
<package pkgid="f4aa5911b8cc8dfdf8b1f644167f44915e8d05ad7ab1fa71f90a5cc7b3dcf57e" name="libmysqld19" arch="i586">
  <version epoch="0" ver="10.2.25" rel="lp151.2.3.1"/>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
</package>
<package pkgid="08b628cc6505cf9886939a957281adcfc1ce926e4788b60a6b90f4572ec7b9a4" name="libmysqld19" arch="x86_64">
  <version epoch="0" ver="10.2.25" rel="lp151.2.3.1"/>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
</package>
<package pkgid="6e0734e41a26715c03a065c45f95d231d238e4f78bb1fbf7e7b428e4bd4de8d0" name="libmysqld19" arch="i586">
  <version epoch="0" ver="10.2.25" rel="lp151.2.6.1"/>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1565179200">- adjust mysql-systemd-helper ("shutdown protected MySQL" section)
  so it checks both ping response and the pid in a process list
  as it can take some time till the process is terminated.
  Otherwise it can lead to "found left-over process" situation
  when regular mariadb is started [bsc#1143215]</changelog>
</package>
<package pkgid="d9f5ab56377f4457b57f1e26477c118b35b382ec780d70305a78ad936de3047a" name="libmysqld19" arch="x86_64">
  <version epoch="0" ver="10.2.25" rel="lp151.2.6.1"/>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1532692800">- switch to libedit as control sequences were already fixed there
  so we don't have to avoid it [bsc#1098683]</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to MariaDB 10.2.18
  * notable changes in 10.2.18
  * MDEV-15511 - if available, stunnel can be used during Galera
    rsync SST
  * MDEV-16791 - mariabackup: Support DDL commands during backup
  * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  * MDEV-16934 - add new system variable eq_range_index_dive_limit
    to speed up queries that new long nested IN lists. The default
    value, for backward compatibility, is 0 meaning "unlimited".
  * MDEV-13333 - errors on InnoDB lock conflict
  * Report all InnoDB redo log corruption
  * MDEV-17043 - Purge of indexed virtual columns may cause hang
    on table-rebuilding DDL
  * MDEV-16868 - corruption of InnoDB temporary tables
  * MDEV-16465 - Invalid (old?) table or database name or hang
    in ha_innobase::delete_table and log semaphore wait upon
    concurrent DDL with foreign keys
  * it fixes the following security vulnerabilities:
    CVE-2018-3066 [bsc#1101678], CVE-2018-3064 [bsc#1103342]
    CVE-2018-3063 [bsc#1101677], CVE-2018-3060 (no bsc)
    CVE-2018-3058 [bsc#1101676]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    https://mariadb.com/kb/en/library/mariadb-10218-changelog
- refresh mariadb-5.5.28-install_db-quiet.patch
- refresh mariadb-10.2.4-fortify-and-O.patch
- refresh mariadb-10.2.9-galera_cnf.patch
- pack wsrep_sst_rsync_wan file to galera subpackage (not shipped)
- add "Requires: libmariadb_plugins" to the mariadb-test subpackage
  in order to be able to test client plugins successfuly
  [bsc#1111859]
- don't remove debug_key_management.so anymore [bsc#1111858]</changelog>
  <changelog author="kstreitova@suse.com" date="1542196800">- update to 10.2.19 GA [bsc#1116686]
  * notable changes:
  * innodb_safe_truncate system variable for a backup-safe
    TRUNCATE TABLE implementation that is based on RENAME,
    CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default
    value for this variable is ON. If you absolutely must use
    XtraBackup instead of Mariabackup, you can set it to OFF and
    restart the server
  * MDEV-17289: Multi-pass recovery fails to apply some redo
    log records
  * MDEV-17073: INSERT?ON DUPLICATE KEY UPDATE became more
    deadlock-prone
  * MDEV-17491: micro optimize page_id_t
  * MDEV-13671: InnoDB should use case-insensitive column name
    comparisons like the rest of the server
  * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  * MDEV-17433: Allow InnoDB start up with empty ib_logfile0
    from mariabackup --prepare
  * MDEV-12547: InnoDB FULLTEXT index has too strict
    innodb_ft_result_cache_limit max limit
  * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY
    check causes hang
  * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and
    FULLTEXT INDEX
  * MDEV-17532: Performance_schema reports wrong directory for
    the temporary files of ALTER TABLE?ALGORITHM=INPLACE
  * MDEV-17545: Predicate lock for SPATIAL INDEX should lock
    non-matching record
  * MDEV-17546: SPATIAL INDEX should not be allowed for
    FOREIGN KEY
  * MDEV-17548: Incorrect access to off-page column for
    indexed virtual column
  * MDEV-12023: Assertion failure sym_node-&gt;table != NULL
    on startup
  * MDEV-17230: encryption_key_id from alter is ignored by
    encryption threads
  * fixes for the following security vulnerabilities:
    CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882],
    CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421],
    CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397],
    CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391],
    CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386],
    CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    https://mariadb.com/kb/en/library/mariadb-10219-changelog
- do not pack libmariadb.pc (packed in mariadb-connector-c)</changelog>
  <changelog author="kstreitova@suse.com" date="1544616000">- remove PerconaFT from the package as it has AGPL licence
  [bsc#1118754]</changelog>
  <changelog author="kstreitova@suse.com" date="1546516800">- update to 10.2.21 GA
  * notable changes:
  * MDEV-17589 - Stack-buffer-overflow with indexed varchar
    (utf8) field
  * MDEV-16987 - ALTER DATABASE possible in read-only mode
    (forbid ALTER DATABASE in read_only)
  * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle
    DROP DATABASE
  * MDEV-6453 - Assertion `inited==NONE || (inited==RND &amp;&amp; scan)'
    failed in handler::ha_rnd_init(bool) with InnoDB, joins,
    AND/OR conditions
  * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB
    system tablespace if LSN&gt;4G
  * MDEV-18041 - Database corruption after renaming a
    prefix-indexed column [bsc#1120041]
  * MDEV-17470 - Orphan temporary files after interrupted ALTER
    cause InnoDB: Operating system error number 17 and eventual
    fatal error 71
  * MDEV-17833: ALTER TABLE is not enforcing prefix index size
    limit
  * MDEV-17989: InnoDB: Failing assertion:
    dict_tf2_is_valid(flags, flags2)
  * MDEV-17765: Locking bug fix for SPATIAL INDEX
  * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  * Fixes for regressions introduced in MariaDB Server 10.2.19 by
    the backup-safe TRUNCATE TABLE (MDEV-13564,
    innodb_safe_truncate=ON) and innodb_undo_log_truncate:
  * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  * Several improvements to MariaDB Server and backup for dealing
    with encrypted or page_compressed pages:
  * MDEV-12112: corruption in encrypted table may be overlooked
  * MDEV-17958: On little-endian systems, remove bug-compatible
    variant of innodb_checksum_algorithm=crc32
  * MDEV-17957: Make innodb_checksum_algorithm stricter for
    strict_* values
  * MDEV-18025: Mariabackup fails to detect corrupted
    page_compressed=1 tables
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    https://mariadb.com/kb/en/library/mariadb-10221-changelog
    https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    https://mariadb.com/kb/en/library/mariadb-10220-changelog
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1550664000">- update to 10.2.22 GA
  * notable changes:
  * Backport Information Schema CHECK_CONSTRAINTS Table.
  * MDEV-17475: Maximum value of table_definition_cache is
    now 2097152
  * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237,
    MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849
  * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194
  * Galera crash recovery fix: MDEV-15740
  * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279
  * Fixes for the following security vulnerabilities:
  * CVE-2019-2510, CVE-2019-2537
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10222-release-notes
    https://mariadb.com/kb/en/library/mariadb-10222-changelog
- add slow_query_log example to my.cnf (my.ini) and adjust the
  logrotate configuration to rotate all /var/log/mysql/*.log files.
  This is useful when the slow query log is enabled. In that case,
  this log file should also be rotated (bsc#1112767)
  * refresh the following patches:
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-10.2.9-galera_cnf.patch
- fix references path below legacy directory /var/run -&gt; /run
- remove xtrabackup requirement as MariaDB ships a build in
  mariabackup so xtrabackup is not needed unless a user specificaly
  wants to use xtrabackup as sst method (also solves [bsc#1122475])
- tracker bug [bsc#1122198]</changelog>
  <changelog author="kstreitova@suse.com" date="1551268800">- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in
  mysql_install_db script [bsc#1127027] MDEV-18526</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562155200">- update to 10.2.25 GA
  * Fixes for the following security vulnerabilities:
  * 10.2.23: none
  * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
  * 10.2.25: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10223-release-notes
    https://mariadb.com/kb/en/library/mariadb-10223-changelog
    https://mariadb.com/kb/en/library/mariadb-10224-release-notes
    https://mariadb.com/kb/en/library/mariadb-10224-changelog
    https://mariadb.com/kb/en/library/mariadb-10225-release-notes
    https://mariadb.com/kb/en/library/mariadb-10225-changelog
- remove mariadb-10.2.22-fix_path.patch that was applied upstream
  in mariadb 10.2.23
- remove caching_sha2_password.so because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)
- remove xtrabackup scripts as it was replaced by mariabackup (we
  already removed xtrabackup requires in the first phase)
- fix reading options for multiple instances if my${INSTANCE}.cnf
  is used. Also remove "umask 077" from mysql-systemd-helper that
  causes that new datadirs are created with wrong permissions. Set
  correct permissions for files created by us (mysql_upgrade_info,
  .run-mysql_upgrade) [bsc#1132666]
- fix build comment to not refer to openSUSE
- tracker bug [bsc#1136035]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1564056000">- remove client_ed25519.so plugin because it's shipped in
  mariadb-connector-c package (libmariadb_plugins)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1565179200">- adjust mysql-systemd-helper ("shutdown protected MySQL" section)
  so it checks both ping response and the pid in a process list
  as it can take some time till the process is terminated.
  Otherwise it can lead to "found left-over process" situation
  when regular mariadb is started [bsc#1143215]</changelog>
</package>
<package pkgid="55692bea59e923953bfa3d4c87a219d144f32e8f9a1cd58c9ec5023a7a2acfc7" name="libncurses5-32bit" arch="x86_64">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="576755aa2ebeb7c35238ca18553cd8e62f48d0d643f5b33405e75b100d4e95c6" name="libncurses5" arch="i586">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="43550073cbe1f7de5b97a160f20dc8a0dcd629dec0de35f325810ad3f2c2fc5b" name="libncurses5" arch="x86_64">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="a83240f8b4c0ce936c8960393c3ce781fef494ca4cbe4f64902194bbf4a66e5b" name="libncurses6-32bit" arch="x86_64">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="f93109903da97719acaa5c987ee0185f0bc53fe001a766fd42db2c670851ca65" name="libncurses6" arch="i586">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="f4228e113bac8d3847da7d30a0f6d3abd6bf49f9ce282e2e12cd08d45f97e8f6" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1513944000">- Disable memory leak checking (boo#1070450)</changelog>
  <changelog author="werner@suse.de" date="1515412800">- Add ncurses patch 20171230
  + build-fix for ncurses-examples with Fedora27, adding check for
    reset_color_pairs() -- not yet in Fedora's package.
  + consistently add $CFLAGS to $MK_SHARED_LIB symbol in configure
    script when the latter happens to use the C compiler rather than
    directly using the loader (report by Jeffrey Walton).
  + set ABI for upcoming 6.1 release in "*.map" files.  While there are
    some remaining internals to apply, no ABI-related changes are
    anticipated.
  + add configure --with-config-suffix option to work around filename
    conflict with Redhat packages versus test-packages.
- Add ncurses patch 20171223
  + modify ncurses-examples to quiet const-warnings when building with
    PDCurses.
  + modify toe to not exit if unable to read a terminal description,
    e.g., if there is a permission problem.
  + minor fix for progs/toe.c, using _nc_free_termtype2.
  + assign 0 to pointer in _nc_tgetent_leak() after freeing it. Also
    avoid reusing pointer from previous successful call to tgetent
    if the latest call is unsuccessful (patch by Michael Schroeder,
    OpenSuSE #1070450).
  + minor fix for test/tracemunch, initialize $awaiting variable.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Add ncurses patch 20180106
  + fixes for writing extended color pairs in putwin.
  + modify test/savescreen.c to add test patterns that exercise 88-,
    256-, etc., colors.
  + modify configure option --with-build-cc, adding clang, c89 and c99
    as possible default values.
  + modify ncurses-examples configure script to use pkg-config for the
    extra form/menu/panel libraries, to be more consistent with the
    handling of the curses/ncurses library.
  + modify test-packages for mingw to supply "pc" files.
  + modify gen-pkgconfig.in to list -lpthread as a private library when
    configured to access it via weak symbols.
  + simplify gen-pkgconfig.in, adding -ltinfo without the special linker
    checks because some versions of the linker simply hard-code the
    behavior.
  + update URLs for ncurses website to use https.
  + modify CF_CURSES_LIBS to fill in $cf_nculib_root in case the
    ncurses-examples are built with a system ncurses that lacks the
    standard "curses" symbolic link, as done by SuSE.  The symbol is
    needed to make a followup check for the pthread library work, and
    would be set properly using the options "--with-screen", etc.
  + generate misc/*.pc with "all" rule, as done for "sources" rule
    (report by Jeffrey Walton).</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
</package>
<package pkgid="e1a00e3919281a3b22ded2532165df6cfbc44ebeaa80412333b68ac210bc9919" name="libndctl-devel" arch="x86_64">
  <version epoch="0" ver="64.1" rel="lp151.2.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1471262400">- Update to v54
  This release incorporates the capabilities of the 4.8 kernel.  Updates
  to the unit tests make up the bulk of this release to account for kernel
  commit 1ee6667cd8d1 "libnvdimm, pfn, dax: fix initialization vs
  autodetect for mode + alignment".
  Commands:
    list: add device-dax information
    list: add btt size information
    create-namespace: fix handling of invalid sector sizes
    create-namespace: static analysis fixes
    bash-completion: namespace completion enhancements
  Tests:
    libndctl: updates for pfn and dax autodetect changes
    libndctl: new gates for running against older kernels
    device-dax: new
    pcommit: remove, the pcommit instruction has been deprecated
  Apis:
    ndctl_dimm_get_manufacturing_date: new
    ndctl_dimm_get_manufacturing_location: new
    ndctl_btt_get_size: new
    ndctl_cmd_unref: fix, accepts NULL input</changelog>
  <changelog author="jthumshirn@suse.com" date="1477224000">- Upstream version v55
  This release incorporates the capabilities of the 4.9 kernel. Major
  highlights include support for retrieving the health status of HPE
  NVDIMMs, and new label manipulation / validation commands.
  Commands:
    list: add HPE NVDIMM health reporting
    init-labels: initialize a namespace-label index-block
    check-labels: validate a namespace-label index-block
    create-namespace: fix crash when target region disabled
    bash-completion: add {en,dis}able-dimm and {check,init}-labels support
  Tests:
    dsm-fail: check that namespaces stay disabled when label DSMs fail
    multi-pmem: validate pmem-region sub-division support
    libndctl: add btt-size check
    libndctl: test health event notification support
    device-dax: validate "invalidate on shutdown" behavior of dax devices
    device-dax: validate direct-i/o to device-dax mappings
    device-dax: check kernel fix for file offset to phys offset translation
    device-dax: check kernel fix for crash when reading /proc/&lt;pid&gt;/smaps
    clear: check kernel fix for making cleared badblocks stay cleared
  Apis:
    daxctl_region_get_available_size: new, in support of dax sub-division
    daxctl_region_get_devname: new, in support of dax sub-division
    daxctl_region_get_dev_seed: new, in support of dax sub-division
    ndctl_dimm_get_health_eventfd: new, fires upon firmware health event notification
    ndctl_cmd_cfg_read_get_size: new, simplifies label manipulation routines
    ndctl_dimm_get_available_labels: fix error return value to be ULONG_MAX
    ndctl_region_get_available_size: fix error return value to be ULLONG_MAX
    ndctl_dimm_cmd_new_cfg_{read,write}: fix to not overflow label area size</changelog>
  <changelog author="rw@suse.com" date="1488369600">- Upstream version v56 (fate#321506)
  This release incorporates the capabilities of the 4.10 kernel. Major
  highlights include the new 'daxctl' utility and its 'list' command, as
  well as several usability tweaks and cleanups to 'ndctl
  create-namespace' and 'ndctl list'.
  Commands:
    ndctl list: add support for filtering by namespace mode
    daxctl list: generically list device-dax instances in a platform
    ndctl create-namespace: reconcile namespace size against interleave-width
  Tests:
    test: sanity check the unit test kernel modules befor running tests
    device-dax: extend it to test 4K and 1G alignments in addition to 2M
    multi-pmem: check namespace deletion cleanup
  Apis:
    ndctl_{pfn,dax}_has_align: detect kernels that lack the align attribute
    ndctl_{set,get}_private_data: attach private data to a library context
    daxctl_region_get_size: retrieve the total dax region size
    daxctl_region_get_align: retrieve the physical alignment of the region
    daxctl_region_get_{first,next}: enable listing of device-dax regions</changelog>
  <changelog author="jthumshirn@suse.com" date="1495454400">-  Add support for MSFT family DSM functions (bsc#1040158)
  + libndctl-add-support-for-the-msft-family-of-dsm-functions.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1500984000">- Upstream version v57.1 (FATE#322885)
  - libndctl-add-support-for-the-msft-family-of-dsm-functions.patch
  This release incorporates the capabilities of the 4.12 kernel. Major
  highlights include the new 'ndctl check-namespace' utility to check and
  repair btt instances, new option to 'ndctl list' to enumerate device
  relative error offsets, and support for the "JEDEC Byte-Addressable
  Energy-Backed Interface NVDIMM" SMART health format.
  Commands:
    ndctl check-namespace: check and repair a btt instance
    ndctl list: new '--media-errors' option
    ndctl list: add acpi 6.1 dimm health state flags
    ndctl write-labels: new command to deploy data to dimm label areas
  Tests:
    blk-exhaust: validate aliased pmem vs blk capacity accounting
    daxdev-errors: error injection and clearing for device-dax
    device-dax-fio: i/o traffic sanity check for device-dax
    label-compat: regression test for interleave-set-cookie compatibility
  Apis:
    ndctl_dimm_has_notifications: acpi 6.1 health-state notification flag
    ndctl_dimm_failed_map: acpi 6.1 map failure flag
    ndctl_region_get_resource: region resource base address
    ndctl_region_get_{first,next}_badblock: media error enumeration
    ndctl_namespace_disable_safe: check for busy block device before disable
    ndctl_namespace_is_active: check if namespace is enabled or claimed</changelog>
  <changelog author="jthumshirn@suse.com" date="1518436800">- Update to version v59.2 (FATE#322885):
  * ndctl: add ndctl_encode_smart_temperature()
  * ndctl: add a new command - inject-smart
  * ndctl, bash-completion: Add bash completion for inject-smart
  * ndctl: Add CONFIG_DEV_DAX_PMEM=m to README.md
  * ndctl: add info about CONFIG_X86_PMEM_LEGACY to README.md
  * ndctl: release v59
  * ndctl: fallback to sysconf for PAGE_SIZE
  * ndctl: release v59.1
  * ndctl, hugetlb: skip, don't fail
  * ndctl, firmware: fix kernel version check</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525262400">- Update to version 60.1 (FATE#322885):
  * ndctl: release v60.1
  * ndctl: fix ABI breakage due to rename of fw_info_get_updated_version
  * ndctl, documentation: add inject-smart to the Makefile
  * ndctl: release v60
  * ndctl, bash-completion: add completion for {start,wait}-scrub commands
  * ndctl, util: add a raw_uuid field to namespace listings
  * ndctl: fix ordering of closing vs invalidating flush_fd
  * ndctl: fix libdaxctl memory leak
  * ndctl: add support in libndctl to provide deep flush
  * ndctl, test: fix pmem-errors.sh vs new ARS rework
  * ndctl, scrub: add {wait,start}-scrub helper utilities
  * ndctl: add new START and WAIT actions
  * ndctl, scrub: add ndctl_bus_start_scrub()
  * ndctl, scrub: report the bus scrub state in 'ndctl list'
  * ndctl, scrub: fix ndctl_bus_wait_for_scrub_completion()
  * ndctl: complete move to "fsdax" and "devdax"
  * ndctl, read-labels: fix json reference counting
  * ndctl: export ndctl.h
  * ndctl, test: add write_cache testing to libndctl
  * libndctl: Add APIs for query and control of write_cache
  * ndctl: fix ndctl_persistence_domain declaration
  * ndctl, rescan-partitions.sh: fix skipping for missing modules
  * ndctl: replace direct errno prints with strerror strings
  * ndctl, inject-smart: fix usage of strerror(errno)
  * ndctl, check: fix a few error returns
  * ndctl: Add support for get bus and region persistence domain
  * ndctl: fail NUMA filtering when unsupported
  * ndctl, documentation: update copyright
  * ndctl: complete removal of daxctl io
  * ndctl: fix input/output size for Intel firmware update DSM
  * ndctl, sysfs: null terminate buffer on error
  * ndctl, list: fix namespace json object parenting
  * ndctl. test: fix module-taint sanity-check
  * ndctl, documentation: remove '...' from label-options.txt
  * ndctl, docs: cleanup the man page for create-namespace
  * ndctl: removing daxctl io
  * libndctl.sym: move new interfaces since v59 to a new section
  * ndctl, list: fix sector_size listing
  * ndctl: merge firmware-update into dimm.c as another dimm operation
  * ndctl: add check for update firmware supported
  * ndctl, bash-completion: add completion for --numa-node
  * ndctl: add filtering based on numa node
  * ndctl: add numa_node support for regions
  * ndctl: don't print erroneous namespace numa_nodes
  * ndctl, tests: firmware-update.sh post-test cleanup
  * ndctl, test: add a unit test for partition rescanning
  * ndctl, create-namespace: fix minimum alignment detection
  * ndctl, list: refactor core topology walking into util_filter_walk()
  * ndctl, firmware-update: kill usage of flock() in verify_fw_file()
  * ndctl, test: kill usage of fallocate in firmware-update.sh
  * ndctl, test: skip btt-pad compat test on pre-4K capable kernels
  * ndctl, test: fix dpa-alloc for kernels with 4M min size
  * ndctl, log: add support for LOG_NOTICE messages
  * ndctl, test: explicitly request namespace size
  * ndctl, test: fix stale json in btt-pad-compat.sh
  * ndctl, test: fix tests that use error injection on older kernels
  * ndctl: add test files to .gitignore
  * ndctl: tests must use local ndctl
  * ndctl, update: remove the check for !cmd when dereferencing it
  * ndctl, update: fix uninitialized variable warnings
  * ndctl, inject-smart: cleanup uninitialized variable warnings
  * ndctl, configure: add -Wmaybe-uninitialized to cflags
  * ndctl: add option to list firmware information for a DIMM
  * ndctl: adding unit test for enable ack shutdown count
  * ndctl: add support for acknolwedge shutdown count enable
  * ndctl, smart: fix threshold temperature helper</changelog>
  <changelog author="rw@suse.com" date="1529668800">- Drop 'v' from pkgconfig-version (breaks 'ipmctl') (FATE#325527)</changelog>
  <changelog author="jthumshirn@suse.com" date="1535025600">- Update to version 62 (FATE#326529):
  * ndctl: release v62
  * ndctl: Work around kernel memory corruption
  * ndctl, udev: fix a resource leak in save_unsafe_shutdown_count
  * ndctl: fix potential null dereference in the smart error handler
  * ndctl, prepare-release.sh: fix revision update checks
  * ndctl: Add 'list' verbose options
  * ndctl, test: fix a resource leak in check_smart_threshold
  * ndctl, test: fix a potential null pointer dereference in 'ndctl test'
  * libndctl: fix a resource leak in ndctl_dimm_get_{{event_}flags, health}
  * ndctl: fix a resource leak in submit_get_firmware_info
  * ndctl, inject: fix a resource leak in ndctl_namespace_get_clear_unit
  * ndctl, monitor: add [Install] Section to systemd unit file of ndctl-monitor
  * ndctl, monitor: add timestamp and pid to log messages in log_file()
  * ndctl, monitor: set default log destination to syslog if "--daemon" is specified
  * ndctl, monitor: fix the lack of detection of invalid path of log file
  * ndctl, intel: Fallback to smart cached shutdown_count
  * ndctl: Create ndctl udev rules for dirty shutdown
  * ndctl, list: add alarm_enable_&lt;field&gt; to list
  * ndctl, test: add a new unit test for max_available_extent namespace
  * ndctl, documentation: Clarify the dimm id for ndctl list d option
  * ndctl, tests: add a new unit test for inject-smart
  * ndctl, inject-smart: continue in spite of errors for uninject-all
  * ndctl, monitor: add [--verbose] option to emit extra debug messages
  * ndctl, monitor: Fix duplicate prefix in monitor.log
  * ndctl, inject-smart: add an interface to inject ctrl-temperature
  * ndctl: Use max_available_extent for namespace
  * ndctl, test/monitor: fix inject-smart field in test_filter_dimmevent
  * ndctl, test: remove the firmware image file before the test end
  * ndctl inject-smart: add an option to uninject smart fields
  * ndctl, inject-smart: Fix man page to match the current behavior
  * ndctl: deprecate undocumented short-options
  * ndctl, documentation: document the label-version option for init-labels
  * ndctl, monitor: fix a resource leak in parse_monitor_event
  * Documentation, create-namespace: clarify fsdax wording
  * ndctl, monitor: improve error reporting throughout monitor.c
  * ndctl, monitor: Fix memory leak in monitor_event
  * ndctl, monitor: fix memory leak in read_config_file
  * ndctl, monitor: Add a config-file section to the man page
  * ndctl, monitor: fix the lack of detection of invalid dimm-events
  * ndctl, bash-completion: add completion for ndctl-monitor
  * ndctl, test: add a new unit test for monitor
  * ndctl, documentation: add man page for monitor
  * ndctl, monitor: add the unit file of systemd for ndctl-monitor service
  * ndctl, monitor: add main ndctl monitor configuration file
  * ndctl, monitor: add a new command - monitor
  * ndctl, test: convert remaining tests to use test/common
  * ndctl, test: fix tests for the array vs object listing fix
  * ndctl list: always output array without --human
  * ndctl: simplify JSON print flag handling
  * ndctl: add an API to check support for smart injection
  * contrib/do_abidiff: make the build more robust
  * ndctl: Remove dependency on linker garbage collection
  * ndctl, test: fix timeouts in device-dax
  * ndctl, test: Fix dax.sh return code
  * libndctl: fix the uninject-error API actually injecting errors
  * ndctl, test: add start/wait scrub to injection tests
  * ndctl: Add CONTRIBUTING.md
  * Documentation: add a newline in namespace Theory of Operations
  * util/strbuf.h: include sys/types.h for ssize_t definition.
  * ndctl, test: check availability of MAP_SYNC for poison test
  * ndctl: release v61
  * ndctl, list: add controller temperature threshold and alarm
  * ndctl, test: remove an unused variable assignment
  * ndctl, Documentation: Add namespace 'theory of operation'
  * ndctl: add a test file to .gitignore
  * ndctl, test: cleanup test scripts
  * ndctl, test: Add NFIT_TEST_BUS[01] variable and some helper funtions to common
  * ndctl, test: Update tests for capacity vs namespace-label locking
  * ndctl, test: Disable poison tests for now
  * ndctl, test: Update libndctl test for controller temperature valid
  * ndctl, contrib: Add helper scripts for new release
  * ndctl, list: Add controller temperature
  * ndctl: Update README.md for code blocks
  * ndctl, test: cleanup test scripts
  * ndctl, test: add common helper functions for test scripts
  * ndctl: autoconf detect BUS_MCEERR_AR
  * test: Add device-dax MADV_HWPOISON test
  * ndctl, util: add OPTION_FILENAME to parse_opt_type
  * ndctl: add an api for getting the ars_status overflow flag
  * ndctl, ars: don't invalidate the user-provided command
  * ndctl: refactor validation of the ars_status command
  * ndctl, list: display the 'map' location in listings
  * ndctl, test: fix sector-mode.sh to work with label support
  * test: add a MADV_HWPOISON test
  * ndctl: hide null uuids
  * ndctl: fix libtool versioning
  * ndctl: warn on variables declared after statement
  * ndctl: remove warnings when -O0 is used with -D_FORTIFY_SOURCE=2
  * configure: add -Wunused-result and -D_FORTIFY_SOURCE=2 to cflags
  * libndctl, test: fix a couple of unchecked returns
  * libndctl: improve debug prints in wait_for_scrub_completion
  * libndctl: fix potential buffer overflow in write_cache APIs
  * ndctl, filter: fix "keyword 'all' is ignored" in util_&lt;obj&gt;_filter()
  * ndctl, inject-error: add a --saturate option
  * libndctl, inject: add 'v2' APIs for inject and uninject
  * libndctl, inject: inject fewer bytes per block by default
  * libndctl, ars: add an API to retrieve clear_err_unit
  * Documentation: add asciidoctor-extensions.rb to .gitignore
  * Documentation: Add the support for asciidoctor
  * Documentation: fix title and section markers
  * ndctl: fix ABI breakage due to rename of fw_info_get_updated_version
  * ndctl, filter: refacor util_&lt;obj&gt;_filter() to support multiple space-seperated arguments
  * ndctl, documentation: add inject-smart to the Makefile</changelog>
  <changelog author="jthumshirn@suse.com" date="1538654400">- Revert to version 61.2 (bsc#1110425)</changelog>
  <changelog author="jthumshirn@suse.com" date="1539000000">- Update to version 63 (FATE#326198):
  * ndctl: release v63
  * ndctl, monitor: in daemon mode, exit successfully if no DIMMs are found
  * ndctl, monitor: fix the severity of "daemon started" message
  * libndctl: set errno for routines that don't return an error status
  * ndctl, check-labels: correct check-labels message wording
  * ndctl: Revert "ndctl: Create ndctl udev rules for dirty shutdown"
  * ndctl: Revert "ndctl, intel: Fallback to smart cached shutdown_count"
  * ndctl, lib: Add dirty-shutdown-count retrieval helper
  * util/json: add a util_namespace_badblocks_to_json() helper
  * util/json: Add comments around re-checking the UTIL_JSON_MEDIA_ERRORS flag
  * util/json: fix an error check for region resource
  * ndctl, lib: add APIs for retrieving namespace badblocks
  * ndctl, lib: refactor badblocks retrieval routines
  * ndctl, test: add a new unit test pfn metadata error clearing
  * ndctl, spec: Use pkgconfig for systemd
  * ndctl, build: Introduce --with-{bash,systemd}
  * ndctl: Suppress command errors if fallback exists
  * ndctl, namespace: rework namespace action accounting
  * ndctl, destroy-namespace: check for an already-zeroed info block
  * ndctl, test: add UUID_LIBS for list_smart_dimm
  * ndctl, docs: Use asciidoctor by default
  * ndctl, list: fix the verbosity level formatting in the man page
  * ndctl, monitor: Fix formatting for --log in the man page
  * ndctl, autoconf: include sys/mman.h for MAP_SYNC</changelog>
  <changelog author="rw@suse.com" date="1541678400">- Fix rpmbuild failure on SLE12 SP4</changelog>
  <changelog author="jthumshirn@suse.com" date="1544702400">- Enable ppc64le build (FATE#326817)</changelog>
  <changelog author="jthumshirn@suse.com" date="1546948800">- Use Type=simple instead of Type=forking for service (bsc#1120931)
  + 0001-ndctl-monitor-use-type-simple-instead-of-type-forkin.patch</changelog>
  <changelog author="jthumshirn@suse.de" date="1549281600">- Update to version 64 (bsc#1123024):
  * ndctl: release v64
  * ndctl, load-keys: fix a resource leak in load_dimm_keys()
  * libndctl: fix a couple of theoretical buffer overruns
  * ndctl, keys: fix a resource leak in verify_kek()
  * ndctl, keys: fix a memory leak in dimm_create_key()
  * ndctl, rpmbuild: Add a dummy readme file to ndctl_keysdir
  * ndctl, bash-completion: add helpers for security commands
  * ndctl: allow for a 'secure erase' using the master passphrase
  * ndctl: master phassphrase management support
  * ndctl: add a wait-overwrite command
  * ndctl: add an overwrite option to 'sanitize-dimm'
  * ndctl: add a load-keys command and a modprobe config
  * ndctl: add a unit test to exercise security operations
  * ndctl: add a sanitize-dimm command
  * ndctl: add a freeze-security command
  * ndctl: add passphrase management commands
  * ndctl: add a Theory of Operation document for security commands
  * ndctl: add support for displaying the security state
  * ndctl.spec.in: remove obsolete Group tag
  * ndctl.spec.in: remove obsolete ldconfig scriptlets
  * libndctl: fix bb iterator leak in namespaces
  * ndctl: Add supported_alignments to the JSON output
  * ndctl/namespace: Make the create-namespace JSON output non-verbose
  * ndctl: Add alignment to the namespace JSON output
  * ndctl/namespace: Validate alignment from the {pfn|dax} seed
  * ndctl/namespace: Use seed alignment as the default
  * ndctl/namespace: Check for seed namespaces earlier
  * libndctl: Use the supported_alignment attribute
  * libndctl: Fix the failure interpretation for status translations
  * daxctl: Add bash-completion
  * ndctl, Documentation: Allow for Makefile variables in Documentation
  * Documentation: Update copyright
  * daxctl: Opt-in to /sys/bus/dax ABI
  * daxctl: Support the /sys/bus/dax ABI
  * ndctl/build: Fix config.h dependency
  * ndctl, rpm: Mark monitor.conf as a configuration file
  * ndctl: Introduce ndctl/config.h
  * ndctl/init-labels: Fix label slot accounting per UEFI 2.7
  * ndctl: clean up usage of ndctl_cmd_submit
  * ndctl, monitor: switch to ndctl_cmd_submit_xlat
  * ndctl, inject-smart: switch to ndctl_cmd_submit_xlat
  * libndctl, intel: Add infrastructure for firmware_status translation
  * libndctl: ignore ENXIO in ndctl_namespace_delete
  * ndctl, monitor: use type=simple instead of type=forking
  * ndctl/monitor: Kill usage of ndctl/lib/private.h
  * ndctl/monitor: Drop vasprintf usage
  * ndctl/monitor: Fix / cleanup log_file()
  * ndctl/monitor: Unify definition of default monitor configfile path
  * ndctl/monitor: Drop 'struct ndctl_ctx *' casts
  * ndctl, daxctl: Add type-safety to command harness
  * ndctl, daxctl: Split builtin.h per-command
  * ndctl: recover from failed namespace creation
  * ndctl, build: Define HAVE_UUID
  * ndctl: fix zero-labels to handle firmware error properly
  * test, dsm-fail: Cleanup leftover debug
  * test, device-dax: Fix intermittent poison handling failures
  * Drop upstreamed patch:
  - 0001-ndctl-monitor-use-type-simple-instead-of-type-forkin.patch</changelog>
  <changelog author="jthumshirn@suse.de" date="1551787200">- Update to version 64.1 (bsc#1127799):
  * ndctl: release v64.1
  * ndctl: fix ndctl linking with libkeyutils
  * ndctl: Fix building in the absence of keyutils</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1565697600">- ndctl, check: Ensure mmap of BTT sections work with 64K page-sizes (bsc#1145421 ltc#176079).
  + ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
</package>
<package pkgid="c097306f510fe777f882bb4adc1c6930a0b701ee6c33fb701c611c731d162d14" name="libndctl6" arch="x86_64">
  <version epoch="0" ver="64.1" rel="lp151.2.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1471262400">- Update to v54
  This release incorporates the capabilities of the 4.8 kernel.  Updates
  to the unit tests make up the bulk of this release to account for kernel
  commit 1ee6667cd8d1 "libnvdimm, pfn, dax: fix initialization vs
  autodetect for mode + alignment".
  Commands:
    list: add device-dax information
    list: add btt size information
    create-namespace: fix handling of invalid sector sizes
    create-namespace: static analysis fixes
    bash-completion: namespace completion enhancements
  Tests:
    libndctl: updates for pfn and dax autodetect changes
    libndctl: new gates for running against older kernels
    device-dax: new
    pcommit: remove, the pcommit instruction has been deprecated
  Apis:
    ndctl_dimm_get_manufacturing_date: new
    ndctl_dimm_get_manufacturing_location: new
    ndctl_btt_get_size: new
    ndctl_cmd_unref: fix, accepts NULL input</changelog>
  <changelog author="jthumshirn@suse.com" date="1477224000">- Upstream version v55
  This release incorporates the capabilities of the 4.9 kernel. Major
  highlights include support for retrieving the health status of HPE
  NVDIMMs, and new label manipulation / validation commands.
  Commands:
    list: add HPE NVDIMM health reporting
    init-labels: initialize a namespace-label index-block
    check-labels: validate a namespace-label index-block
    create-namespace: fix crash when target region disabled
    bash-completion: add {en,dis}able-dimm and {check,init}-labels support
  Tests:
    dsm-fail: check that namespaces stay disabled when label DSMs fail
    multi-pmem: validate pmem-region sub-division support
    libndctl: add btt-size check
    libndctl: test health event notification support
    device-dax: validate "invalidate on shutdown" behavior of dax devices
    device-dax: validate direct-i/o to device-dax mappings
    device-dax: check kernel fix for file offset to phys offset translation
    device-dax: check kernel fix for crash when reading /proc/&lt;pid&gt;/smaps
    clear: check kernel fix for making cleared badblocks stay cleared
  Apis:
    daxctl_region_get_available_size: new, in support of dax sub-division
    daxctl_region_get_devname: new, in support of dax sub-division
    daxctl_region_get_dev_seed: new, in support of dax sub-division
    ndctl_dimm_get_health_eventfd: new, fires upon firmware health event notification
    ndctl_cmd_cfg_read_get_size: new, simplifies label manipulation routines
    ndctl_dimm_get_available_labels: fix error return value to be ULONG_MAX
    ndctl_region_get_available_size: fix error return value to be ULLONG_MAX
    ndctl_dimm_cmd_new_cfg_{read,write}: fix to not overflow label area size</changelog>
  <changelog author="rw@suse.com" date="1488369600">- Upstream version v56 (fate#321506)
  This release incorporates the capabilities of the 4.10 kernel. Major
  highlights include the new 'daxctl' utility and its 'list' command, as
  well as several usability tweaks and cleanups to 'ndctl
  create-namespace' and 'ndctl list'.
  Commands:
    ndctl list: add support for filtering by namespace mode
    daxctl list: generically list device-dax instances in a platform
    ndctl create-namespace: reconcile namespace size against interleave-width
  Tests:
    test: sanity check the unit test kernel modules befor running tests
    device-dax: extend it to test 4K and 1G alignments in addition to 2M
    multi-pmem: check namespace deletion cleanup
  Apis:
    ndctl_{pfn,dax}_has_align: detect kernels that lack the align attribute
    ndctl_{set,get}_private_data: attach private data to a library context
    daxctl_region_get_size: retrieve the total dax region size
    daxctl_region_get_align: retrieve the physical alignment of the region
    daxctl_region_get_{first,next}: enable listing of device-dax regions</changelog>
  <changelog author="jthumshirn@suse.com" date="1495454400">-  Add support for MSFT family DSM functions (bsc#1040158)
  + libndctl-add-support-for-the-msft-family-of-dsm-functions.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1500984000">- Upstream version v57.1 (FATE#322885)
  - libndctl-add-support-for-the-msft-family-of-dsm-functions.patch
  This release incorporates the capabilities of the 4.12 kernel. Major
  highlights include the new 'ndctl check-namespace' utility to check and
  repair btt instances, new option to 'ndctl list' to enumerate device
  relative error offsets, and support for the "JEDEC Byte-Addressable
  Energy-Backed Interface NVDIMM" SMART health format.
  Commands:
    ndctl check-namespace: check and repair a btt instance
    ndctl list: new '--media-errors' option
    ndctl list: add acpi 6.1 dimm health state flags
    ndctl write-labels: new command to deploy data to dimm label areas
  Tests:
    blk-exhaust: validate aliased pmem vs blk capacity accounting
    daxdev-errors: error injection and clearing for device-dax
    device-dax-fio: i/o traffic sanity check for device-dax
    label-compat: regression test for interleave-set-cookie compatibility
  Apis:
    ndctl_dimm_has_notifications: acpi 6.1 health-state notification flag
    ndctl_dimm_failed_map: acpi 6.1 map failure flag
    ndctl_region_get_resource: region resource base address
    ndctl_region_get_{first,next}_badblock: media error enumeration
    ndctl_namespace_disable_safe: check for busy block device before disable
    ndctl_namespace_is_active: check if namespace is enabled or claimed</changelog>
  <changelog author="jthumshirn@suse.com" date="1518436800">- Update to version v59.2 (FATE#322885):
  * ndctl: add ndctl_encode_smart_temperature()
  * ndctl: add a new command - inject-smart
  * ndctl, bash-completion: Add bash completion for inject-smart
  * ndctl: Add CONFIG_DEV_DAX_PMEM=m to README.md
  * ndctl: add info about CONFIG_X86_PMEM_LEGACY to README.md
  * ndctl: release v59
  * ndctl: fallback to sysconf for PAGE_SIZE
  * ndctl: release v59.1
  * ndctl, hugetlb: skip, don't fail
  * ndctl, firmware: fix kernel version check</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525262400">- Update to version 60.1 (FATE#322885):
  * ndctl: release v60.1
  * ndctl: fix ABI breakage due to rename of fw_info_get_updated_version
  * ndctl, documentation: add inject-smart to the Makefile
  * ndctl: release v60
  * ndctl, bash-completion: add completion for {start,wait}-scrub commands
  * ndctl, util: add a raw_uuid field to namespace listings
  * ndctl: fix ordering of closing vs invalidating flush_fd
  * ndctl: fix libdaxctl memory leak
  * ndctl: add support in libndctl to provide deep flush
  * ndctl, test: fix pmem-errors.sh vs new ARS rework
  * ndctl, scrub: add {wait,start}-scrub helper utilities
  * ndctl: add new START and WAIT actions
  * ndctl, scrub: add ndctl_bus_start_scrub()
  * ndctl, scrub: report the bus scrub state in 'ndctl list'
  * ndctl, scrub: fix ndctl_bus_wait_for_scrub_completion()
  * ndctl: complete move to "fsdax" and "devdax"
  * ndctl, read-labels: fix json reference counting
  * ndctl: export ndctl.h
  * ndctl, test: add write_cache testing to libndctl
  * libndctl: Add APIs for query and control of write_cache
  * ndctl: fix ndctl_persistence_domain declaration
  * ndctl, rescan-partitions.sh: fix skipping for missing modules
  * ndctl: replace direct errno prints with strerror strings
  * ndctl, inject-smart: fix usage of strerror(errno)
  * ndctl, check: fix a few error returns
  * ndctl: Add support for get bus and region persistence domain
  * ndctl: fail NUMA filtering when unsupported
  * ndctl, documentation: update copyright
  * ndctl: complete removal of daxctl io
  * ndctl: fix input/output size for Intel firmware update DSM
  * ndctl, sysfs: null terminate buffer on error
  * ndctl, list: fix namespace json object parenting
  * ndctl. test: fix module-taint sanity-check
  * ndctl, documentation: remove '...' from label-options.txt
  * ndctl, docs: cleanup the man page for create-namespace
  * ndctl: removing daxctl io
  * libndctl.sym: move new interfaces since v59 to a new section
  * ndctl, list: fix sector_size listing
  * ndctl: merge firmware-update into dimm.c as another dimm operation
  * ndctl: add check for update firmware supported
  * ndctl, bash-completion: add completion for --numa-node
  * ndctl: add filtering based on numa node
  * ndctl: add numa_node support for regions
  * ndctl: don't print erroneous namespace numa_nodes
  * ndctl, tests: firmware-update.sh post-test cleanup
  * ndctl, test: add a unit test for partition rescanning
  * ndctl, create-namespace: fix minimum alignment detection
  * ndctl, list: refactor core topology walking into util_filter_walk()
  * ndctl, firmware-update: kill usage of flock() in verify_fw_file()
  * ndctl, test: kill usage of fallocate in firmware-update.sh
  * ndctl, test: skip btt-pad compat test on pre-4K capable kernels
  * ndctl, test: fix dpa-alloc for kernels with 4M min size
  * ndctl, log: add support for LOG_NOTICE messages
  * ndctl, test: explicitly request namespace size
  * ndctl, test: fix stale json in btt-pad-compat.sh
  * ndctl, test: fix tests that use error injection on older kernels
  * ndctl: add test files to .gitignore
  * ndctl: tests must use local ndctl
  * ndctl, update: remove the check for !cmd when dereferencing it
  * ndctl, update: fix uninitialized variable warnings
  * ndctl, inject-smart: cleanup uninitialized variable warnings
  * ndctl, configure: add -Wmaybe-uninitialized to cflags
  * ndctl: add option to list firmware information for a DIMM
  * ndctl: adding unit test for enable ack shutdown count
  * ndctl: add support for acknolwedge shutdown count enable
  * ndctl, smart: fix threshold temperature helper</changelog>
  <changelog author="rw@suse.com" date="1529668800">- Drop 'v' from pkgconfig-version (breaks 'ipmctl') (FATE#325527)</changelog>
  <changelog author="jthumshirn@suse.com" date="1535025600">- Update to version 62 (FATE#326529):
  * ndctl: release v62
  * ndctl: Work around kernel memory corruption
  * ndctl, udev: fix a resource leak in save_unsafe_shutdown_count
  * ndctl: fix potential null dereference in the smart error handler
  * ndctl, prepare-release.sh: fix revision update checks
  * ndctl: Add 'list' verbose options
  * ndctl, test: fix a resource leak in check_smart_threshold
  * ndctl, test: fix a potential null pointer dereference in 'ndctl test'
  * libndctl: fix a resource leak in ndctl_dimm_get_{{event_}flags, health}
  * ndctl: fix a resource leak in submit_get_firmware_info
  * ndctl, inject: fix a resource leak in ndctl_namespace_get_clear_unit
  * ndctl, monitor: add [Install] Section to systemd unit file of ndctl-monitor
  * ndctl, monitor: add timestamp and pid to log messages in log_file()
  * ndctl, monitor: set default log destination to syslog if "--daemon" is specified
  * ndctl, monitor: fix the lack of detection of invalid path of log file
  * ndctl, intel: Fallback to smart cached shutdown_count
  * ndctl: Create ndctl udev rules for dirty shutdown
  * ndctl, list: add alarm_enable_&lt;field&gt; to list
  * ndctl, test: add a new unit test for max_available_extent namespace
  * ndctl, documentation: Clarify the dimm id for ndctl list d option
  * ndctl, tests: add a new unit test for inject-smart
  * ndctl, inject-smart: continue in spite of errors for uninject-all
  * ndctl, monitor: add [--verbose] option to emit extra debug messages
  * ndctl, monitor: Fix duplicate prefix in monitor.log
  * ndctl, inject-smart: add an interface to inject ctrl-temperature
  * ndctl: Use max_available_extent for namespace
  * ndctl, test/monitor: fix inject-smart field in test_filter_dimmevent
  * ndctl, test: remove the firmware image file before the test end
  * ndctl inject-smart: add an option to uninject smart fields
  * ndctl, inject-smart: Fix man page to match the current behavior
  * ndctl: deprecate undocumented short-options
  * ndctl, documentation: document the label-version option for init-labels
  * ndctl, monitor: fix a resource leak in parse_monitor_event
  * Documentation, create-namespace: clarify fsdax wording
  * ndctl, monitor: improve error reporting throughout monitor.c
  * ndctl, monitor: Fix memory leak in monitor_event
  * ndctl, monitor: fix memory leak in read_config_file
  * ndctl, monitor: Add a config-file section to the man page
  * ndctl, monitor: fix the lack of detection of invalid dimm-events
  * ndctl, bash-completion: add completion for ndctl-monitor
  * ndctl, test: add a new unit test for monitor
  * ndctl, documentation: add man page for monitor
  * ndctl, monitor: add the unit file of systemd for ndctl-monitor service
  * ndctl, monitor: add main ndctl monitor configuration file
  * ndctl, monitor: add a new command - monitor
  * ndctl, test: convert remaining tests to use test/common
  * ndctl, test: fix tests for the array vs object listing fix
  * ndctl list: always output array without --human
  * ndctl: simplify JSON print flag handling
  * ndctl: add an API to check support for smart injection
  * contrib/do_abidiff: make the build more robust
  * ndctl: Remove dependency on linker garbage collection
  * ndctl, test: fix timeouts in device-dax
  * ndctl, test: Fix dax.sh return code
  * libndctl: fix the uninject-error API actually injecting errors
  * ndctl, test: add start/wait scrub to injection tests
  * ndctl: Add CONTRIBUTING.md
  * Documentation: add a newline in namespace Theory of Operations
  * util/strbuf.h: include sys/types.h for ssize_t definition.
  * ndctl, test: check availability of MAP_SYNC for poison test
  * ndctl: release v61
  * ndctl, list: add controller temperature threshold and alarm
  * ndctl, test: remove an unused variable assignment
  * ndctl, Documentation: Add namespace 'theory of operation'
  * ndctl: add a test file to .gitignore
  * ndctl, test: cleanup test scripts
  * ndctl, test: Add NFIT_TEST_BUS[01] variable and some helper funtions to common
  * ndctl, test: Update tests for capacity vs namespace-label locking
  * ndctl, test: Disable poison tests for now
  * ndctl, test: Update libndctl test for controller temperature valid
  * ndctl, contrib: Add helper scripts for new release
  * ndctl, list: Add controller temperature
  * ndctl: Update README.md for code blocks
  * ndctl, test: cleanup test scripts
  * ndctl, test: add common helper functions for test scripts
  * ndctl: autoconf detect BUS_MCEERR_AR
  * test: Add device-dax MADV_HWPOISON test
  * ndctl, util: add OPTION_FILENAME to parse_opt_type
  * ndctl: add an api for getting the ars_status overflow flag
  * ndctl, ars: don't invalidate the user-provided command
  * ndctl: refactor validation of the ars_status command
  * ndctl, list: display the 'map' location in listings
  * ndctl, test: fix sector-mode.sh to work with label support
  * test: add a MADV_HWPOISON test
  * ndctl: hide null uuids
  * ndctl: fix libtool versioning
  * ndctl: warn on variables declared after statement
  * ndctl: remove warnings when -O0 is used with -D_FORTIFY_SOURCE=2
  * configure: add -Wunused-result and -D_FORTIFY_SOURCE=2 to cflags
  * libndctl, test: fix a couple of unchecked returns
  * libndctl: improve debug prints in wait_for_scrub_completion
  * libndctl: fix potential buffer overflow in write_cache APIs
  * ndctl, filter: fix "keyword 'all' is ignored" in util_&lt;obj&gt;_filter()
  * ndctl, inject-error: add a --saturate option
  * libndctl, inject: add 'v2' APIs for inject and uninject
  * libndctl, inject: inject fewer bytes per block by default
  * libndctl, ars: add an API to retrieve clear_err_unit
  * Documentation: add asciidoctor-extensions.rb to .gitignore
  * Documentation: Add the support for asciidoctor
  * Documentation: fix title and section markers
  * ndctl: fix ABI breakage due to rename of fw_info_get_updated_version
  * ndctl, filter: refacor util_&lt;obj&gt;_filter() to support multiple space-seperated arguments
  * ndctl, documentation: add inject-smart to the Makefile</changelog>
  <changelog author="jthumshirn@suse.com" date="1538654400">- Revert to version 61.2 (bsc#1110425)</changelog>
  <changelog author="jthumshirn@suse.com" date="1539000000">- Update to version 63 (FATE#326198):
  * ndctl: release v63
  * ndctl, monitor: in daemon mode, exit successfully if no DIMMs are found
  * ndctl, monitor: fix the severity of "daemon started" message
  * libndctl: set errno for routines that don't return an error status
  * ndctl, check-labels: correct check-labels message wording
  * ndctl: Revert "ndctl: Create ndctl udev rules for dirty shutdown"
  * ndctl: Revert "ndctl, intel: Fallback to smart cached shutdown_count"
  * ndctl, lib: Add dirty-shutdown-count retrieval helper
  * util/json: add a util_namespace_badblocks_to_json() helper
  * util/json: Add comments around re-checking the UTIL_JSON_MEDIA_ERRORS flag
  * util/json: fix an error check for region resource
  * ndctl, lib: add APIs for retrieving namespace badblocks
  * ndctl, lib: refactor badblocks retrieval routines
  * ndctl, test: add a new unit test pfn metadata error clearing
  * ndctl, spec: Use pkgconfig for systemd
  * ndctl, build: Introduce --with-{bash,systemd}
  * ndctl: Suppress command errors if fallback exists
  * ndctl, namespace: rework namespace action accounting
  * ndctl, destroy-namespace: check for an already-zeroed info block
  * ndctl, test: add UUID_LIBS for list_smart_dimm
  * ndctl, docs: Use asciidoctor by default
  * ndctl, list: fix the verbosity level formatting in the man page
  * ndctl, monitor: Fix formatting for --log in the man page
  * ndctl, autoconf: include sys/mman.h for MAP_SYNC</changelog>
  <changelog author="rw@suse.com" date="1541678400">- Fix rpmbuild failure on SLE12 SP4</changelog>
  <changelog author="jthumshirn@suse.com" date="1544702400">- Enable ppc64le build (FATE#326817)</changelog>
  <changelog author="jthumshirn@suse.com" date="1546948800">- Use Type=simple instead of Type=forking for service (bsc#1120931)
  + 0001-ndctl-monitor-use-type-simple-instead-of-type-forkin.patch</changelog>
  <changelog author="jthumshirn@suse.de" date="1549281600">- Update to version 64 (bsc#1123024):
  * ndctl: release v64
  * ndctl, load-keys: fix a resource leak in load_dimm_keys()
  * libndctl: fix a couple of theoretical buffer overruns
  * ndctl, keys: fix a resource leak in verify_kek()
  * ndctl, keys: fix a memory leak in dimm_create_key()
  * ndctl, rpmbuild: Add a dummy readme file to ndctl_keysdir
  * ndctl, bash-completion: add helpers for security commands
  * ndctl: allow for a 'secure erase' using the master passphrase
  * ndctl: master phassphrase management support
  * ndctl: add a wait-overwrite command
  * ndctl: add an overwrite option to 'sanitize-dimm'
  * ndctl: add a load-keys command and a modprobe config
  * ndctl: add a unit test to exercise security operations
  * ndctl: add a sanitize-dimm command
  * ndctl: add a freeze-security command
  * ndctl: add passphrase management commands
  * ndctl: add a Theory of Operation document for security commands
  * ndctl: add support for displaying the security state
  * ndctl.spec.in: remove obsolete Group tag
  * ndctl.spec.in: remove obsolete ldconfig scriptlets
  * libndctl: fix bb iterator leak in namespaces
  * ndctl: Add supported_alignments to the JSON output
  * ndctl/namespace: Make the create-namespace JSON output non-verbose
  * ndctl: Add alignment to the namespace JSON output
  * ndctl/namespace: Validate alignment from the {pfn|dax} seed
  * ndctl/namespace: Use seed alignment as the default
  * ndctl/namespace: Check for seed namespaces earlier
  * libndctl: Use the supported_alignment attribute
  * libndctl: Fix the failure interpretation for status translations
  * daxctl: Add bash-completion
  * ndctl, Documentation: Allow for Makefile variables in Documentation
  * Documentation: Update copyright
  * daxctl: Opt-in to /sys/bus/dax ABI
  * daxctl: Support the /sys/bus/dax ABI
  * ndctl/build: Fix config.h dependency
  * ndctl, rpm: Mark monitor.conf as a configuration file
  * ndctl: Introduce ndctl/config.h
  * ndctl/init-labels: Fix label slot accounting per UEFI 2.7
  * ndctl: clean up usage of ndctl_cmd_submit
  * ndctl, monitor: switch to ndctl_cmd_submit_xlat
  * ndctl, inject-smart: switch to ndctl_cmd_submit_xlat
  * libndctl, intel: Add infrastructure for firmware_status translation
  * libndctl: ignore ENXIO in ndctl_namespace_delete
  * ndctl, monitor: use type=simple instead of type=forking
  * ndctl/monitor: Kill usage of ndctl/lib/private.h
  * ndctl/monitor: Drop vasprintf usage
  * ndctl/monitor: Fix / cleanup log_file()
  * ndctl/monitor: Unify definition of default monitor configfile path
  * ndctl/monitor: Drop 'struct ndctl_ctx *' casts
  * ndctl, daxctl: Add type-safety to command harness
  * ndctl, daxctl: Split builtin.h per-command
  * ndctl: recover from failed namespace creation
  * ndctl, build: Define HAVE_UUID
  * ndctl: fix zero-labels to handle firmware error properly
  * test, dsm-fail: Cleanup leftover debug
  * test, device-dax: Fix intermittent poison handling failures
  * Drop upstreamed patch:
  - 0001-ndctl-monitor-use-type-simple-instead-of-type-forkin.patch</changelog>
  <changelog author="jthumshirn@suse.de" date="1551787200">- Update to version 64.1 (bsc#1127799):
  * ndctl: release v64.1
  * ndctl: fix ndctl linking with libkeyutils
  * ndctl: Fix building in the absence of keyutils</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1565697600">- ndctl, check: Ensure mmap of BTT sections work with 64K page-sizes (bsc#1145421 ltc#176079).
  + ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
</package>
<package pkgid="cd1f07604511a737f59bab95f61fc396ff079668d350bfab256da5446ec09fba" name="libndr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0689c6086187030e993cf08617fa6276efa63e37ce5a97bf6d56b68b44a05b1a" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2b07203a50dee2510ffd5bb206b64817fc606f97f07ce7e42e6af123c069d33c" name="libndr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="385b1e54207d0b37af7636bcb989bcb920a8e972eea95affb45629afd4059f6b" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="133afd0e8da81ab56f0cc32a7ccf108715454603312cd93f9628da2f76cbf907" name="libndr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="3c9cd9d2cf810377f47d5898c58a7677b31fc6ca68a9784e33df30b61ec557f9" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="f50bb6e3e1941d0285c12fd4e619cbb77cb21b7fb79f8da2490d0ece240d6f6c" name="libndr-krb5pac-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e506ac3327ee27d997e21fdd912be4938f7bf52068830ea77280fd75ad09925b" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2aabf16011e8f4be0a2f9b96ba4c95473186880c3fc7bba9f7b20ffee14298f9" name="libndr-krb5pac-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="32d2c831628a4a950cbd28034f58e57b3556cf91d0dda79981171801b540c4b6" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="3edae385fbb755d083a83fb6dddbc9c9263c3db529673678eb4b79eb054f813d" name="libndr-krb5pac-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="172c1d9f6aad449d44bbfb79583160c918cc33c9de5865f39e93e7d7474291fc" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="3167837fcdf43bcd0927be5d29198d1949f855693b6ee62dfab79773e12bdd14" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="32314905642c90fb18d3f2a93a828b7c7dc32963b1380726bccbd0ee248258f2" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="06107d803cbb703bb932183cd969fe537c2fa67bb48421bee48e26a8cb42d5cb" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b1e8200793bcb7972bfa00eec622682659d08351e17c0c906d198a7031efbac7" name="libndr-krb5pac0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="120adf8b01f73474d6ad219073f3183917b6ff6690f4e5e75542293668dcce0c" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c4fcd8cfe3620d8445eff29fdc9425edae4188947d608e7b434f43a482648821" name="libndr-krb5pac0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="233ab461b4f8964abbc78b31b4f731b0621da81ce31350688136e2194ab69907" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="537591b48ef3287c0def42e8701a0e92ec13090fd50b5a3c77f03815a44b8eb4" name="libndr-krb5pac0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="3cd00a43e95e3dafe705c3c1338945ce021ab1643f4324932840e242a38eb654" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="cc10b7d921782b98e2a0afee0de4817b54f05ad04545d15e5913502b442e2cd3" name="libndr-nbt-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="422441c8aa466ce5bfc10146495301cfb6663a906435a6e62317573f860ef758" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="767113d4c5dc237b439c237bde37f45fff41ed2bef55306a009deed0dd496731" name="libndr-nbt-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="e04ca141401736b67c1edc456a840d4a24f3a699c44fdfe7b3657c021d461950" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="5da5782483ac5afd6811f15eded81c551f24be5657f105ed02eb961f33409b9f" name="libndr-nbt-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="2d154e393e3ebe5e2d4031cf7eb0323babedecfe9594580c9b2439064bbfa3fd" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="c6f5b3a6b9f69d3178f7f57426f589f7318397b90301dce234b230102d16bab5" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="90a8858dceffceeac1c059131dc16d980e8e497959239bee1d2d8030654d6719" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="ca910bf84610424f9c6d2856d6fabea625a3f040f73484798b35d9faa7cc3020" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="b639590e475257cd5345b0b2d89050456abc0219ce46572cb9915195972d15e0" name="libndr-nbt0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b0a568080f18efcbaf535fb6f573867d17e79d3e7fe45ae6f7e38143e8b19569" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4cc649495b3825168de346f9ff208b2a3bf71f1e6070ba82fc8d979730e7643d" name="libndr-nbt0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="d4b374632a30ecb4f3acaced68d91fc80bb4e5a87824416b74ff9934fcc2c1f1" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="4d8f559dfbfcd2c141b4318874109127bc3a0253a51e3f3aad9262de8c4d33af" name="libndr-nbt0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="8fddfaeb14c9975c7a14d9263091be807eb8287da90adacacb9970324b05dcda" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="4750df943fdc85468e5630765823ef233755955037a2b41298fdb27d81cb1fee" name="libndr-standard-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2ab187210221dc251f102517ce499e9929701e6e5a563f6e8104515cf72a3aac" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="28e08a11146796a61f1b9af616458fc6bdee7671940473102aa3d7d66d80ad6b" name="libndr-standard-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="13c794f681ab86601c547248f2493975ba4c24a5a78e33102f75312c4f317d25" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="d8c49919a05daea0d5f8a9276a7a26e42750643b6fdb0c225eae9af3b4bad7f2" name="libndr-standard-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="17d24f6b7ddd944847e219992d9171e55b89071f203f4223b14919492235d39d" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="49d8f3df528f703bd2d1b28be624d15ab56227d7f6e8baf23115c123fda0be03" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="1c74abab60a3059297c4f22b3a8d709f997a6f8a5c27b802f0f3530402287f3d" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="f9dc3777e589b29e7c73aa339bd18bb333662429da553f28424347ca3c9344e7" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="7b115556128a21578298a4848dd1333add04231d5e5efd0cbdd18090964bfa58" name="libndr-standard0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="13949b13ca5f6b36b77494c4378337c6e485ee67bd7f75ff34454e9781d14f0d" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="370cb87809bec023ce312d43e86adc2684b19bf0a614ba82f9b35e51a1c2d4e4" name="libndr-standard0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="ea70f9b323005d1da25ed04a4eb9844be2daf44df13d55bc6b29886f77c4c005" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="b9e71a4e605feae66c9c37579287cca2705ee1c95e6abbf772f1ba40b294936e" name="libndr-standard0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="6da2baef9c207c4b6a91fd19fb41d2b85fa497051e214346c8f19d662b48fd1e" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="e23660bd9f2efbbbe5b622dd14d8a6ae4c2ec200b2212b0227aeb63e195d9c7d" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="27dc03f74934906b430cf067d860398a575cba0783c4e63beaa5a587b2e7bf7a" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="2e83a0518b37870866586bb857be7760cdfa14ae45cdcfecf342a0dd45d67cb3" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="2a609d4cbf60c898421f3647d6daf151047ef167b5591352c1bcda0cd5934b8a" name="libndr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="5903de2f975d4ae41eee7c5efa206bdcf36a0c442f47011b544eb386fbe26381" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f25b28b00a2d04fa4b6cdabb34a414cfa65168a69371e7ad22a76a20a38f8952" name="libndr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="6234a1b04a8d6d7f6e19e7c88b8500fff499f29cd1e36eb839b058a911249866" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="b32d794eb12bad219cf6f6cb0cc5515e23bb6efd67bf0ec16e3be9fa43a3ba35" name="libndr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="335a99ea2450566fa8db744b3c6a8fe160fe1d52ee070453fe57964165423c56" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="6cc4b334cf7dfe0ad3aa119a973fc02470379f2819f20e3699e12ece1ea6a0fd" name="libneon-devel" arch="i586">
  <version epoch="0" ver="0.30.2" rel="lp151.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425470400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1
  * small changes, for details see included ChangeLog</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to 0.30.2
  Add support for OpenSSL 1.1.x (Kurt Roeckx).
  Fix PKCS#11 support under GnuTLS 3.x.
    PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec</changelog>
  <changelog author="marco.strigl@suse.com" date="1521460800">- fixed flaky timeout tests for ppc64le (bsc#1085850)
  * fix_timeout_tests_for_ppc64le.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1521547200">- Install license
- replace_manpage_with_links.sh: replace named links with symlinks
  and stop using fdupes as it just linked linked manpages</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1538395200">- replaced libopenssl-devel with libopenssl-1_1-devel</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1539864000">- Disabled some tests due to behavior change in underlying OpenSSL.
- Replaced error message string to match new message from OpenSSL.
- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these
  two changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Remove pointless --with-pic (because of --disable-static)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539950401">- BuildRequires libopenssl-1_1-devel &gt;= 1.1.1 becase build fails with
  1.1.0</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1566216000">- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Sync sources with Factory to fix build with openssl 1.1.1
  (bsc#1149792)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289601">- Drop unnecessary requirement for OpenSSL 1.1.1
- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building
  with OpenSSL 1.1.1</changelog>
</package>
<package pkgid="cc9e47c16559eefa22e6a153bca3fb02dc72f0aa85c32dd22f6f70da03b26633" name="libneon-devel" arch="x86_64">
  <version epoch="0" ver="0.30.2" rel="lp151.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425470400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1
  * small changes, for details see included ChangeLog</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to 0.30.2
  Add support for OpenSSL 1.1.x (Kurt Roeckx).
  Fix PKCS#11 support under GnuTLS 3.x.
    PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec</changelog>
  <changelog author="marco.strigl@suse.com" date="1521460800">- fixed flaky timeout tests for ppc64le (bsc#1085850)
  * fix_timeout_tests_for_ppc64le.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1521547200">- Install license
- replace_manpage_with_links.sh: replace named links with symlinks
  and stop using fdupes as it just linked linked manpages</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1538395200">- replaced libopenssl-devel with libopenssl-1_1-devel</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1539864000">- Disabled some tests due to behavior change in underlying OpenSSL.
- Replaced error message string to match new message from OpenSSL.
- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these
  two changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Remove pointless --with-pic (because of --disable-static)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539950401">- BuildRequires libopenssl-1_1-devel &gt;= 1.1.1 becase build fails with
  1.1.0</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1566216000">- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Sync sources with Factory to fix build with openssl 1.1.1
  (bsc#1149792)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289601">- Drop unnecessary requirement for OpenSSL 1.1.1
- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building
  with OpenSSL 1.1.1</changelog>
</package>
<package pkgid="43a3bc322f17453e14d50b7d65fbc443fa8f8cb56081458141c276d23f881c84" name="libneon27" arch="i586">
  <version epoch="0" ver="0.30.2" rel="lp151.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425470400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1
  * small changes, for details see included ChangeLog</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to 0.30.2
  Add support for OpenSSL 1.1.x (Kurt Roeckx).
  Fix PKCS#11 support under GnuTLS 3.x.
    PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec</changelog>
  <changelog author="marco.strigl@suse.com" date="1521460800">- fixed flaky timeout tests for ppc64le (bsc#1085850)
  * fix_timeout_tests_for_ppc64le.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1521547200">- Install license
- replace_manpage_with_links.sh: replace named links with symlinks
  and stop using fdupes as it just linked linked manpages</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1538395200">- replaced libopenssl-devel with libopenssl-1_1-devel</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1539864000">- Disabled some tests due to behavior change in underlying OpenSSL.
- Replaced error message string to match new message from OpenSSL.
- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these
  two changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Remove pointless --with-pic (because of --disable-static)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539950401">- BuildRequires libopenssl-1_1-devel &gt;= 1.1.1 becase build fails with
  1.1.0</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1566216000">- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Sync sources with Factory to fix build with openssl 1.1.1
  (bsc#1149792)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289601">- Drop unnecessary requirement for OpenSSL 1.1.1
- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building
  with OpenSSL 1.1.1</changelog>
</package>
<package pkgid="c54b45df2d119116c194207e016dd0b4f1b7648a88e307e483760e2738f65001" name="libneon27" arch="x86_64">
  <version epoch="0" ver="0.30.2" rel="lp151.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425470400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1
  * small changes, for details see included ChangeLog</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to 0.30.2
  Add support for OpenSSL 1.1.x (Kurt Roeckx).
  Fix PKCS#11 support under GnuTLS 3.x.
    PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec</changelog>
  <changelog author="marco.strigl@suse.com" date="1521460800">- fixed flaky timeout tests for ppc64le (bsc#1085850)
  * fix_timeout_tests_for_ppc64le.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1521547200">- Install license
- replace_manpage_with_links.sh: replace named links with symlinks
  and stop using fdupes as it just linked linked manpages</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1538395200">- replaced libopenssl-devel with libopenssl-1_1-devel</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1539864000">- Disabled some tests due to behavior change in underlying OpenSSL.
- Replaced error message string to match new message from OpenSSL.
- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these
  two changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Remove pointless --with-pic (because of --disable-static)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539950401">- BuildRequires libopenssl-1_1-devel &gt;= 1.1.1 becase build fails with
  1.1.0</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1566216000">- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Sync sources with Factory to fix build with openssl 1.1.1
  (bsc#1149792)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289601">- Drop unnecessary requirement for OpenSSL 1.1.1
- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building
  with OpenSSL 1.1.1</changelog>
</package>
<package pkgid="327a48b1a7b0b3110cce6fc6264ab04d743d26f519b6fb8f6bebd52058ea85fd" name="libneon27-32bit" arch="x86_64">
  <version epoch="0" ver="0.30.2" rel="lp151.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425470400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1
  * small changes, for details see included ChangeLog</changelog>
  <changelog author="vcizek@suse.com" date="1503489600">- Update to 0.30.2
  Add support for OpenSSL 1.1.x (Kurt Roeckx).
  Fix PKCS#11 support under GnuTLS 3.x.
    PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec</changelog>
  <changelog author="marco.strigl@suse.com" date="1521460800">- fixed flaky timeout tests for ppc64le (bsc#1085850)
  * fix_timeout_tests_for_ppc64le.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1521547200">- Install license
- replace_manpage_with_links.sh: replace named links with symlinks
  and stop using fdupes as it just linked linked manpages</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1538395200">- replaced libopenssl-devel with libopenssl-1_1-devel</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1539864000">- Disabled some tests due to behavior change in underlying OpenSSL.
- Replaced error message string to match new message from OpenSSL.
- Add neon-0.30.2_ssl-fix_timeout_retvals.patch implementing these
  two changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Remove pointless --with-pic (because of --disable-static)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539950401">- BuildRequires libopenssl-1_1-devel &gt;= 1.1.1 becase build fails with
  1.1.0</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1566216000">- fix testsuite fail due to expired nulcerts (neon-0.30.2-nulcert.patch)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289600">- Sync sources with Factory to fix build with openssl 1.1.1
  (bsc#1149792)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568289601">- Drop unnecessary requirement for OpenSSL 1.1.1
- Apply neon-0.30.2_ssl-fix_timeout_retvals.patch only when building
  with OpenSSL 1.1.1</changelog>
</package>
<package pkgid="9818da46f2d076bbaaa2f5704adbb743993debca80cbccd3923b0c4dfa0d9c59" name="libnetapi-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="da07e504eb332a40ad392bedc18c3db0e1d4e5e47bf15016d2c8bdfe7ae20434" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="d4221ace201d4a1955d231448bda124a5ec284d737d671476897c6d9d468fd16" name="libnetapi-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="f0757d01f8af2411c8c6bc26954cea82348101dad0c949ab64a9692367bf4c86" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="1427f1ffe6a94ca37a3d41ccb19ae5c0bb2c3bee86955c36bf3e316a159ca6c4" name="libnetapi-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="c1bd8ea019b5ac48f7102ec7e3a6c10b86b5c6fa1a0fa75bcc117d3424222af6" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="7deb5f11a1f3b863c4c542e3c44ea243d129e93911b28bf5dbeec70940c66307" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ec15f891e67304693801ab382c9a0666d2bd4a5039acb3225a5c4fcb855cb8ac" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="ad8f0dbcdf34c31564c3ba409c990785f631e0ffd6d6aafff40e7cfac5fedf41" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="0abdf2a765eb6cd5769abda1e4f45fae1b6ce53673a93b43a3cc780355ec80a9" name="libnetapi0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e390da55d1f74758947f8363ff40ec7aee5bc0a09a0505ac421f713900a55f3a" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2b6ebee7100a1bac2169fbfb6678651ace71e87030ad65eebd9202bca5714e6d" name="libnetapi0" arch="i586">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="a0fa1c0406d3dd28bc67742de80a83588c93558f043bf1739c83d73e28d6cf5f" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.187.71edee57d5a" rel="lp151.2.6.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
</package>
<package pkgid="025e8460359c5341134a241f714c8690f1c49eba10fffee539f3c20ff67d0937" name="libnetapi0" arch="i586">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="4307c7f0151ac3d20c5da225c3ffc368e2c99a4db20f84ce5eb6d233add3b78c" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.210.ab0549acb05" rel="lp151.2.9.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1565179200">- Prepare for use future use of kernel keyrings, modify
  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1566561600">- CVE-2019-10197: user escape from share path definition;
  (bso#14035); (bsc#1141267).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1567512000">- Fix auth problems when printing via smbspool backend with kerberos;
  (bnc#1148539); (bso#13832).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1569499200">- Fix broken username/password authentication with CUPS and
  smbspool; (bsc#1152143); (bso#14128).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
</package>
<package pkgid="21fee5a5f1622904b414cb23103646950afcbf773ea267724cdd71400f3bbbe0" name="libnetpbm-devel" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="a4aae0108bb1d58ef4ccf30443c2207445be039946bd378af19bfd29af20bc20" name="libnetpbm-devel" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="544bd44cb9acd5b405a4642a982b52882fa034cb41618bcffa2737703508b1dc" name="libnetpbm11" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="4b92f72a733740b35e2158e3b5468964885f8b5f244c79a5b9f8e91f240192da" name="libnetpbm11" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="5c8b6679e9abe24ee2916d072f7ff565b391bb4b0a6b0c1554dc288f84a1dc14" name="libnetpbm11-32bit" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="79b1ec8956977996175bb9fc128758f668a00a552549245e8443af661ff1d359" name="libnfsidmap-sss" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="6253a90e6f5a07a34db36f563722d0b423074cdbeb767797ac2c141ebd5fc8c8" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="5362af244990e3c7b7b19e054c52b2bd162e14dfb97093e1cf91889f4b1fa125" name="libnfsidmap-sss" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="648ee2e5274db51adedd7a4d07ef11495b23c4850a9dd467b0600ec9649435ab" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.6.1"/>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
</package>
<package pkgid="1286e9a2176d2c18dae1db92e4415740b6087a0db04d318332e621d4cc2ebe82" name="libnfsidmap-sss" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="8001234267fe14e57d250070ad7f82afa29eb351faecdc8275b49f2fe67c7ae7" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
</package>
<package pkgid="0855ccf5307cbea81e6b238dbc2847bcaf1bb644c68f52a1ad8c2e2fc0c10c88" name="libnghttp2-14" arch="i586">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="22ead9598c67ca15ddab060fe592a80a9dcac2888c283532b7fb6f42ecc2963f" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="e5591ad3050b79ecd66564710afa6d89e8919df9a72a7d6d597c5bbf1ba9bb25" name="libnghttp2-14-32bit" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="50c9a0174008da62c30238972a0bd46fbccb71e0d08ee05039723a087caae058" name="libnghttp2-devel" arch="i586">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="a5a98a6562f4a306d9233f0d91b7c07d80069e2338c03834ea80f588066f13a4" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="0b6e95f79e61056f8ecffd98a6407233114541766585ef999a1a5fa6a085c626" name="libnghttp2_asio-devel" arch="i586">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="c0019fb5365bb0355ed2a7b8b0b96eb98636e7888e87ca749fb556f6aa6d0a13" name="libnghttp2_asio-devel" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="7c1dbf35a37f8b7b77ec9d0860d39af6114bef6b0d15532f69d4fa26f6703df2" name="libnghttp2_asio1" arch="i586">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="a876ceb63f979723b680a852230d94622fe7992e2697fc51d69e35af9425c85b" name="libnghttp2_asio1" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="dac9428758ef030bdbdeea3aefd39281f6a3ac14467653f3df38ce5bf40fc37f" name="libnghttp2_asio1-32bit" arch="x86_64">
  <version epoch="0" ver="1.39.2" rel="lp151.3.3.1"/>
  <changelog author="schwab@suse.de" date="1507550400">- Don't use jemalloc on ppc or %arm, where it is broken.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.27.0:
  * h2load: Print out h2 header fields with --verbose option
  * nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client
    only
- Changes for version 1.26.0:
  * docs: Fix some typos in the nghttpx how-to
  * h2load: Fix bug that timing script stalls with -m1
  * h2load: Reservoir sampling (GH-984)
  * h2load: Add timing-based load-testing in h2load
- Switch to python3 support</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Drop forgotten python2 build dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
</package>
<package pkgid="580431e36608546a3f087092906f3b403fc275791757f3a32c57d7f9b551c69f" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="d241a05d315ad53c04bf7ac599ae974cf00bdd9afd16482b5d791ad35a39213e" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="add257d8978bf8020ca5ed795029d7e0fac50b52e6c95808db82d0e488b0a357" name="libobjc4" arch="i586">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="6ca910f88f1cc9af46e10db9c0406bcb86e6c8e66a375a655392da290ab0de01" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="a74c08818e3830ad512c34b5e4da302c22dda9bf13af52e7cb3c0068b80a5716" name="libobjc4" arch="i586">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="15ad484797f156a0f01c46fe5a36b2b839c4db6b483d999f2e5a3ac1c29eaaaa" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp151.2.6.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="a93b24f6675f1781b39f05a68ab7943d8f5eb16e641cfb439cef683ea807f5d3" name="libomp7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="d1c46367d162d95b9d1151fa47c8c21d7f4e785177d74aa4290c66add39371e3" name="libomp7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="9e4942f1f2d7c1a92a76f4c4ebe8ebb8c096cdf9dd6d994025f0783b4af9b157" name="libomp7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="784db0dac9f6d19f4a6ca62991a0e6d7135a96c0de8439dd629ad904fb8e7a33" name="libomp7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.6.1"/>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
</package>
<package pkgid="ff509d9f37e82cd968436021029a4999ff46f74884dcdf5d0fc8133f6f70d7d5" name="libopeniscsiusr0_2_0" arch="i586">
  <version epoch="0" ver="2.0.876" rel="lp151.13.3.1"/>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="d56d161bfeff35b6843c848ef4dac75de9e834acb35c151ac26fddc31519b1de" name="libopeniscsiusr0_2_0" arch="x86_64">
  <version epoch="0" ver="2.0.876" rel="lp151.13.3.1"/>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="5cc0fbc140f95a32216f405212647403c11d48417e47f4bb2c40762d27d875f2" name="libopeniscsiusr0_2_0" arch="i586">
  <version epoch="0" ver="2.0.876" rel="lp151.13.6.1"/>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571572800">- Set timeout value when querying session info for a single
  session (bsc#1152774), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="c1aaff0a487ecfb0523d797eede24345a7dedde3947b4cd6cea1cefa72ff2f05" name="libopeniscsiusr0_2_0" arch="x86_64">
  <version epoch="0" ver="2.0.876" rel="lp151.13.6.1"/>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571572800">- Set timeout value when querying session info for a single
  session (bsc#1152774), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="4084ff91c2797f5b9036a41202c197b6ecf83260b5dd4079ee4fcaa458e16b4b" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="026663440cccd3012fad50e786f44fd3e8024e29da4b0d477b51db4250007293" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="80435ab6a160a42dfdeb27a59b51f244ecbce15f4adbff1d307df96e633a1a49" name="libopenmpt-devel" arch="i586">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="ac8cb10ae2bc81f7af8defd074f26d8b16a4a1a43fcfbb87606aa2d4d2c5f559" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="ca43942942d223054733dca57cd01441d331af4e3a9b3d3e9f6795e78b824082" name="libopenmpt-devel" arch="i586">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="cd57c25cbb4cc15f2677388b83f653ad17e65047e2681d22773644d68fce8e5c" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="db74dc31aae5cbd44c853c84050dfe7c04fab295f5dd5fce5a99355c584d7ef4" name="libopenmpt0" arch="i586">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="0156081c7b4149477b4757ac20ec921091bbc125c253ad01fa11d740c35d9135" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="3018f17ee823dab9c8a0f976ef7c6162a7ae6c1f3e5d195b5746b5cdcc290d65" name="libopenmpt0" arch="i586">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="fdf2c5355fe741e8235605902fb6c26c087ea1651dae4beeae58b1b6f0b27552" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="5e6829de1f09b62a9f238b636ab15802575b463a62d73db8579207a2f977367c" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="f2579d451b24b0b97e53e15f366fa50e2722dad983dd948ecc8bb49272383bdf" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="f6a4a8cebd063d574d953570ed225c61957a96eb8970a28b4d8596fff7046697" name="libopenmpt_modplug1" arch="i586">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="08d528f386702ac41110f7b0a3d578a044f3661385055fb84f27b437d6d54fe5" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="edcc2713cb5c6f32dcf1cfe6579396e42060f8561e3c620c9739d24d570ed07f" name="libopenmpt_modplug1" arch="i586">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="89958dacb25dd067413036afbb94ee865540e2b1fe7bfd61d7c86e014b9b6fbc" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="9572e3bafb4c9a337316d5d17403bad06dfa916ee33b76047ebba70aae52974f" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
</package>
<package pkgid="af75c156c74839f1eb432c32a920f748650c81986ab7eb0d05596b8690c8d6ba" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp151.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
</package>
<package pkgid="80239a2486e679bd128471e4c89ce87132320bda98ea94cadeda89f4fd323982" name="libopenssl-1_0_0-devel" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="e0bca97f119a6009e114ba81d355463f57b83381cbd5fd2db62f5503935e09bd" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="107fbaddc2ad93d5390bce98ab16a60812af8cc550e067f1653865becd6f4018" name="libopenssl-1_0_0-devel" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="ed2d44c5039af71dae0eeb57cece3116db2ce8f25069e70bec8792faba8b95e5" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="99ef5289190fa2272bc6d92b677862f5f447de5703b0f99060ab29b576810aff" name="libopenssl-1_0_0-devel" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="50fa1cf38f8f101be4751a941ff0d4b6294a39edb73f6c9ef124ff713a38cfb8" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="363d2fc9644f6e1468a0d5a2cb3f003efbf605b459a423d4a421c086bf1195ac" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="4a747d2e253f088af50ed77bc74fdd8c171de53bd82e1156d863739e0db4c00b" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="817f0814c465025ef51f86377fd025ddcb9cf02c203c68e18b5ba1a9618f588b" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="4f4a65e0a6844a695533b9acbecac1d1b730cf451dd1d4767b8cd0bfe1f06d5a" name="libopenssl-1_1-devel" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="06fd93ce43a54e2d1315d45924fb7143154569a2223ed064ef05a13d31725f45" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="bfae883a72a3a25d8649294b8828f02bd74b8dd13cce1ae1b512d8ca2e9d6061" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="d2c6d913cb4dc94ac2344d14891522efd9e06172322a4f1a6b2098e7444bdaa2" name="libopenssl1_0_0" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="5c2db98f918f94a3f667c1feb9caa684e5d8d56b9a1dad73b2be64446ff5b6c2" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="70a61e8bf39116ef78e019a3024e5291a93c45401789171b8f53044438ea8a8f" name="libopenssl1_0_0" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="d7c20fd01e3cdc0d0d1693af5307ea1600de302dd598b637a9cc88f587afe675" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="6f896059ee386e17293083f232c1ff9a7f58aa366a34fe88f624819561bb6f29" name="libopenssl1_0_0" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="6b9e94191e8d42d3eb341835e69a54894cf57a5f97d7f1dfb2a441e772dd02b8" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="10b9dbefb6ef70effb9be9d3a2a569caa69879a662687221b2323e63eda0a88e" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="57867b3fdbc71c259e0d4dee04d853d03192d176e16d8f627c5134e95ac0f015" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="4226060acce45fe5dd7ef5d148e32259bbee3d0c9f5f653f2baac6a122bdcd3f" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="2ea9170b542db7518d0321e18dd0c6b1c99577350004e1c202289507ddfa92aa" name="libopenssl1_0_0-hmac" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="cb24f002f4f96b257114199bd42078f44d3fa4d8161cfe004a20816e1a6df981" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="07576a4cadac48f7de96a39af74b6fb4d71321f2376a50ca29f940e6e400a121" name="libopenssl1_0_0-hmac" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="f19816d8f1efc2d0bb1b8c9eed4dce15cd43e974bbb58b9152da70501be4039f" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="2af51e8c6305fe102ff5779122d435b3b7496a974413dfe701e7a691ecc1358e" name="libopenssl1_0_0-hmac" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="63dd39999fc090e8dbb9ea423f5b92e83e3d820e8f84a2b541e056973c7c6a48" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="d85d0c6f5a3045b475762a4118fe9ea3c054a44935abdc5574db038ff4e570ae" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="68976eb1093f4bfbae002e07d313fb037b026d104a249f5f9420c0c1f1305ee8" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="44a0e9ce0cafe6cdef2b357b1ac102669678952c22249d9937107c92b38c361b" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="a132ebb99ccd8a352b1fa9e4cb2a93029cda0690348b292af9545504656b5473" name="libopenssl1_0_0-steam" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="c1183a92738fef2750f0d90ab01892b45a9e54ed2a41bad46b9f152674d0168e" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="09106d54b18fa2be9ad233b96b3998c9a510dc7f0a762b95d2644884e2f43184" name="libopenssl1_0_0-steam" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="a6569f9d8b296c795357d30ec6e4e4f9f2fec665041568df9db13dea7c3968d6" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="8e6b0a6fb61ab2550a168757f00a1fd172d6de34c6c6f97884b4e1461b53ffab" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.10.1"/>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568894400">- Prevent invalid curve attacks by validating that an EC point lies
  on the curve (bsc#1131291)
  * add 0001-RT-4242-reject-invalid-EC-point-coordinates.patch</changelog>
</package>
<package pkgid="b5a81ef8c8573f10b092c5d05a1caf7470ebd0e205e9e9ec3f91c6ebe4a1743f" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.6.1"/>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553169600">- Add back the steam subpackage because it's needed on Leap 15
  whose openssl-1_0_0 package is inherited from SLE-15 (bsc#1130041)
  * add openssl-fix-cpuid_setup.patch</changelog>
</package>
<package pkgid="b865acc5bc99fb31400e9286b70192a8fe9cd88a32a745d20605b4f4cc6c420d" name="libopenssl1_1" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="adb0999d66aa7528e0029da00ded5ffa2d9d63d9da59a77f6f856d39cddd9ac8" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="4aa7eaa288aae9274d55012d33b7717907c79f289c85e72b98c0419ce28c4deb" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="0bba0e4fbe68be000fd311a5727b2b2429747029679c1ffe7306a3c4fd4655a5" name="libopenssl1_1-hmac" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="0a2c6f9386b08b6459088016a596c1167fdcc27c0b32e81685a2b7e6d6ee4f8f" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="40f9d5273b1593f899ae2c0e4c867b08ce132403b3c46a4e2c2b0f4490691780" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="lp151.8.3.1"/>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
  <changelog author="vcizek@suse.com" date="1533211200">- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
- Don't Require openssl-1_1 from the devel package, just Recommend it</changelog>
  <changelog author="vcizek@suse.com" date="1534248000">- Update to 1.1.0i
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
  * Fixed a text canonicalisation bug in CMS
- drop patches (upstream):
  * 0001-Limit-scope-of-CN-name-constraints.patch
  * 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch
  * 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch
  * 0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch
  * openssl-add-blinding-to-dsa.patch
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-CVE-2018-0732.patch
- refresh patches:
  * openssl-1.1.0-fips.patch
  * openssl-disable_rsa_keygen_tests_with_small_modulus.patch
- rename openssl-CVE-2018-0737.patch to openssl-CVE-2018-0737-fips.patch
  as it now only includes changes to the fips code</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864001">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add openssl-dsa_paramgen2_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1540296000">- Obsolete libopenssl-1_0_0-devel by libopenssl-1_1-devel to avoid
  conflicts when updating from older distributions (bsc#1106180)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in ECDSA signature generation
    (bsc#1113651, CVE-2018-0735)
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes
- Add patches:
  * openssl-CVE-2018-0734.patch
  * openssl-CVE-2018-0735.patch
  * 0001-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1545307200">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
  * add patch openssl-Bleichenbachers_CAT.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1547812800">- Fix FIPS RSA generator (bsc#1118913)
  * import fixed openssl-1.1.0-fips.patch from Fedora
  * drop openssl-CVE-2018-0737-fips.patch which got merged into
    openssl-1.1.0-fips.patch
  * refresh openssl-fips-rsagen-d-bits.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158400">- Replace fate#321518 s390x patches from closed pull request
  https://github.com/openssl/openssl/pull/2859 with patches from
  openssl git master (bsc#1122984)
- add patches:
  0001-s390x-assembly-pack-extend-s390x-capability-vector.patch
  0002-s390x-assembly-pack-add-KMA-code-path-for-aes-ctr.patch
  0003-crypto-aes-asm-aes-s390x.pl-replace-decrypt-flag-by-.patch
  0004-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0005-s390x-assembly-pack-add-KMAC-code-path-for-aes-ccm.patch
  0006-s390x-assembly-pack-add-KM-code-path-for-aes-ecb.patch
  0007-s390x-assembly-pack-add-KMO-code-path-for-aes-ofb.patch
  0008-s390x-assembly-pack-add-KMF-code-path-for-aes-cfb-cf.patch
  0009-Fix-undefined-behavior-in-s390x-aes-gcm-ccm.patch
- drop patches:
  0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1548158401">- Add vectorized chacha20 implementation for s390x (fate#326561)
  * https://github.com/openssl/openssl/pull/6919
- add patches:
  0001-s390x-assembly-pack-perlasm-support.patch
  0002-crypto-chacha-asm-chacha-s390x.pl-add-vx-code-path.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1549886400">- Add s390x poly1305 vectorized implementation (fate#326351)
  * https://github.com/openssl/openssl/pull/7991
- add 0001-crypto-poly1305-asm-poly1305-s390x.pl-add-vx-code-pa.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551960000">- OpenSSL Security Advisory [6 March 2019]
  * Prevent long nonces in ChaCha20-Poly1305 (bsc#1128189, CVE-2019-1543)
  * add openssl-CVE-2019-1543.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Fix segfault in openssl speed when an unknown algorithm is passed
  (bsc#1125494)
  * add 0001-apps-speed-fix-segfault-while-looking-up-algorithm-n.patch
- Correctly skip binary curves in openssl speed to avoid spitting
  errors (bsc#1116833)
  * add openssl-speed_skip_binary_curves_NO_EC2M.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568289600">- OpenSSL Security Advisory [10 September 2019]
  * EC_GROUP_set_generator side channel attack avoidance. [bsc#1150003, CVE-2019-1547]
  * Bleichenbacher attack against cms/pkcs7 encryption transported key [bsc#1150250, CVE-2019-1563]
- Added patches:
  * openssl-CVE-2019-1547.patch
  * openssl-CVE-2019-1563.patch</changelog>
</package>
<package pkgid="28a3bdeca7b46c9aeedb1c64c7f471720c7088d5815eab225b12b39510baa618" name="libopenvswitch-2_11-0" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp151.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1538049600">- Version bump to 2.9.2 (fate#325952). Some of the changes are:
  * NSH implementation now conforms to latest draft (draft-ietf-sfc-nsh-28).
  * OVSDB:
  - ovsdb-client: New "get-schema-cksum" and "query" commands.
  - ovsdb-client: New "backup" and "restore" commands.
  - ovsdb-client: New --timeout option.
  - ovsdb-tool: New "db-name" and "schema-name" commands.
  * OVSDB has new, experimental support for database clustering:
  - New high-level documentation in ovsdb(7).
  - New file format documentation for developers in ovsdb(5).
  - Protocol documentation moved from ovsdb-server(1) to ovsdb-server(7).
  - ovsdb-server now supports online schema conversion via
    "ovsdb-client convert".
  - ovsdb-server now always hosts a built-in database named _Server. See
    ovsdb-server(5) for more details.
  - ovsdb-client: New "get-schema-cksum", "query", "backup", "restore",
    and "wait" commands.  New --timeout option.
  - ovsdb-tool: New "create-cluster", "join-cluster", "db-cid", "db-sid",
    "db-local-address", "db-is-clustered", "db-is-standalone", "db-name",
    "schema-name", "compare-versions", and "check-cluster" commands.
  - ovsdb-server: New ovs-appctl commands for managing clusters.
  - ovs-sandbox: New support for clustered databases.
  * ovs-vsctl and other commands that display data in tables now support a
  - -max-column-width option to limit column width.
  * No longer slow-path traffic that sends to a controller.  Applications,
    such as OVN ACL logging, want to send a copy of a packet to a
    controller while leaving the actual packet forwarding in the datapath.
  * OVN:
  - The "requested-chassis" option for a logical switch port now accepts a
    chassis "hostname" in addition to a chassis "name".
  - IPv6
  * Added support to send IPv6 Router Advertisement packets in response to
    the IPv6 Router Solicitation packets from  the VIF ports.
  * Added support to generate Neighbor Solicitation packets using the OVN
    action 'nd_ns' to resolve unknown next hop MAC addresses for the
    IPv6 packets.
  - ovn-ctl: New commands run_nb_ovsdb and run_sb_ovsdb.
  - ovn-sbctl, ovn-nbctl: New options --leader-only, --no-leader-only.
  * OpenFlow:
  - ct_clear action is now backed by kernel datapath. Support is probed for
    when OVS starts.
  - ovs-dpctl and related ovs-appctl commands:
  * "flush-conntrack" now accept a 5-tuple to delete a specific
    connection tracking entry.
  * New "ct-set-maxconns", "ct-get-maxconns", and "ct-get-nconns" commands
    for userspace datapath.
  - No longer send packets to the Linux TAP device if it's DOWN unless it is
    in another networking namespace.
  * DPDK:
  - Add support for DPDK v17.11
  - Add support for vHost IOMMU
  - New debug appctl command 'netdev-dpdk/get-mempool-info'.
  * Custom statistics:
  - DPDK physical ports now return custom set of "dropped", "error" and
    "management" statistics.
  - ovs-ofctl dump-ports command now prints new of set custom statistics
    if available (for OpenFlow 1.4+).
  - New appctl command 'dpif-netdev/pmd-rxq-rebalance' to rebalance rxq to
    pmd assignments.
  - Add rxq utilization of pmd to appctl 'dpif-netdev/pmd-rxq-show'.
  - Add support for vHost dequeue zero copy (experimental)
  * Userspace datapath:
  - Output packet batching support.
  * vswitchd:
  - Datapath IDs may now be specified as 0x1 (etc.) instead of 16 digits.
  - Configuring a controller, or unconfiguring all controllers, now deletes
    all groups and meters (as well as all flows).
  - New --enable-sparse configure option enables "sparse" checking by default.
  - Added additional information to vhost-user status.
- Get rid of the old openvswitch DPDK migration steps everybody should have
  migrated from &lt;2.6 to latest releases by now.
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Remove patches which have made it upstream
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540209600">- Version bump to 2.9.3. Some of the changes are:
  * dpif-netdev.at: Add missing backslash.
  * ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion.
  * ovn-ctl: Fix the wrong pidfile argument passed to ovsdb-servers
  * ovndb-servers.ocf: Add ssl support for managing OVN DB resources with pacemaker using LB VIP.
  * ovn-ctl: Allow passing ssl certs when starting OVN DBs in ssl mode.
  * expr: Disallow &lt; &lt;= &gt;= &gt; comparisons against empty value set.
  * expr: Set a limit on the depth of nested parentheses
  * dpif-netdev: Add vlan to mask for flow_put operation.
  * odp-util: Fix a use-after-free bug.
  * dpif-netlink: Fix null pointer.
  * dpif-netlink: don't allocate per thread netlink sockets
  * bfd: Make the tp_dst masking megaflow-friendly.
  * netdev: Properly clear 'details' when iterating in NETDEV_QOS_FOR_EACH.
  * lex: Fix buffer overrun parsing overlong hexadecimal constants.
  * ovsdb-client: Fix a bug that uses wrong index
  * ofproto-dpif-xlate: Fix conntrack fields on NXT_RESUME
  * ovs-save: save and restore groups on restart
  * flow: Fix uninitialized flow fields in IPv6 error case.
  * ofproto-dpif: Fix NXT_RESUME flow stats
  * dhparams: Fix .c file generation with OpenSSL &gt;= 1.1.1-pre9
  * ovn: Add DHCP support for option 252.
  * meta-flow: Make "nw_frag" a synonym for "ip_frag".
  * ovsdb-server: Alleviate the possible data loss in an active/standby setup
  * ovs-save: Don't always include the default flow during restore
  * lib/tc: treat vlan id and prio as independent fields
  * datapath: lisp: Fix uninitialized field in tunnel_cfg.
  * odp-util: Don't attempt to write IPv6 flow label bits that don't exist.
  * lib/tc: reject offloading of non-Ethernet packets
  * ovs-ctl: Allow add-remote without vswitchd started.
  * daemon-unix: Use same name for original or restarted children.
  * dpif-netdev: Prevent unsafe access when retrieving meter stats.
  * Add ovs.compat module to python package
  * utilities: Drop shebang from bash completion script
  * ofp-actions: Re-fix error path for parsing OpenFlow actions.
  * nx-match: Avoid double-free on some error paths.
  * vswitch.xml: Fix key type and description style of tc-policy.
  * ovn: Fix the issue in IPv6 Neigh Solicitation responder for router IPs
  * netdev-dpdk: Support the link speed of XL710
  * ovn-northd: Support learning neighbor from ARP request.
  * ovn-northd: LR respond ARP from valid subnet only.
  * netdev-linux: Avoid division by 0 if kernel reports bad scheduler data.
  * ofp-actions: Avoid assertion failure for clone(ct(...bad actions...)).
  * ovsdb-idl: Adjust indexes during transactions.
  * ovsdb-idl.c: Fix IDL index problem when rows are updated.
  * netdev-dpdk: Use hex for PCI vendor ID.
  * ofp-port: Fix buffer overread parsing Intel custom statistics.
  * netdev-dpdk: Fix failure to configure flow control at netdev-init.
  * ofctl: Fixup compare_flows function
  * raft: Fix use-after-free error in raft_store_snapshot().
  * stream-ssl: Define SSL_OP_NO_SSL_MASK for OpenSSL versions that lack it.
  * utilities: Launch ovsdb-tool without using PAM
  * ovs-ofctl: Better validate OpenFlow message length in "ofp-parse-pcap".
  * stream-ssl: Don't enable new TLS versions by default
  * pcap-file: Fix formatting of log message.
  * meta-flow: Make mf_vl_mff_mf_from_nxm_header() require a valid field.
  * nx-match: Fix memory leak in oxm_pull_field_array() error case.
  * lib/tc: Handle ttl for ipv6 too
  * compat: Initialize IPv4 reassembly secret timer
  * ovn-nbctl: Fix compilation warnings.
  * conntrack: Fix conn_update_state_alg use after free.
  * ovn-northd: Don't shadow addr_family in add_router_lb_flow().
  * ovn: Add router load balancer undnat rule for IPv6
  * ifupdown.sh: Correctly bring up bond slaves.
  * conntrack: Fix using alg_exp_entry out of scope.
  * ovndb-servers: Set connection table when using load balancer to manage ovndb clusters via pacemaker.
  * ovn-ctl: Support NB and SB DBs to start without using remote connections.
  * ovndb-servers.ocf: add LB support for managing ovndb cluster:
  * ofp-group: Don't assert-fail decoding bad OF1.5 group mod type or command.
  * ovn: Clarify the differences between QoS marking and metering.
  * ovs-ofctl: Clarifications in the Meter Syntax man page section.
  * OpenFlow: Update documentation to indicate support for virtual meters.
  * ofp-actions: Fix undefined behavior shifting 'int' 16 places left.
  * extract-ofp-errors: Fix undefined behavior shifting 'int' 16 places left.
  * json: Avoid signed integer overflow in parsing exponents.
  * ofp-actions: Fix buffer overread in decode_LEARN_specs().
  * ofp-actions: Avoid buffer overread in BUNDLE action decoding.
  * conntrack: Fix fragmentation checks.
  * rconn: Suppress 'connected' log for unreliable connections.
  * ofproto-macros: Ignore "Dropped # log messages" in check_logs.
  * datapath: stt: linearize in SKIP_ZERO_COPY case
  * ovsdb-idl: Correct singleton insert logic
  * ovn: Fix DHCP classless static route for non-classful masks.
  * ofproto: Fix OVS crash when reverting old flows in bundle commit
  * rconn: Introduce new invariant to fix assertion failure in corner case.
  * dpctl.man: Correct argument to "dump-flows".
  * python: avoid useless JSON conversion to enhance performance
  * ofproto: Make ofproto_port_open_type() faster.
  * ovs-thread: Fix thread id for threads not started with ovs_thread_create()
  * netdev-dpdk: Handle ENOTSUP for rte_eth_dev_set_mtu.
  * netdev-dpdk: Enable HW_CRC_STRIP for virtual functions.
  * lib: fix typo in fragment handling error message
  * ovs-vswitchd: Do not use system routing table with --disable-system.
  * vswitchd: Allow user to directly specify sFlow agent address.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1541678400">- Improve python packaging (bsc#1115085)
  * Rename python*-openvswitch subpackages to python*-ovs to follow
    the openSUSE policy that packages should be named after the modules
    they install.
  * Build the JSON C bindings and as a result the 'noarch' BuildArch
    needs to be removed.
  * Drop the python*-openvswitch-test packages and merge them with the
    test subpackage
  * Build the python bindings using setuptools
  * Include the egg-info package.
  * Use libopenvswitch as dependency to python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1543233600">- Backport upstream fix for python json parser memory leak (bsc#1116437)
  * 0001-python-c-ext-Fix-memory-leak-in-Parser_finish.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o (jcaamano@suse.com)" date="1548331200">- Version bump to 2.11.0+git20190123.ad83fc9ab (fate#325916, fate#325951,
  fate#326025, fate#326992). Some of the changes are:
  * Linux datapath:
  - Support for the kernel versions 4.16.x and 4.17.x.
  * OpenFlow:
  - OFPMP_TABLE_FEATURES_REQUEST can now modify table features.
  * ovs-ofctl:
  - "mod-table" command can now change OpenFlow table names.
  * The environment variable OVS_SYSLOG_METHOD, if set, is now used
    as the default syslog method.
  * The environment variable OVS_CTL_TIMEOUT, if set, is now used
    as the default timeout for control utilities.
  * ovn:
  - OVN-SB schema changed: duplicated IP with same Encapsulation type
    is not allowed any more.  Please refer to
    Documentation/intro/install/ovn-upgrades.rst for the instructions
    in case there are problems encountered when upgrading from an earlier
    version.
  - New support for IPSEC encrypted tunnels between hypervisors.
  - ovn-ctl: allow passing user:group ids to the OVN daemons.
  - IPAM/MACAM:
  * add the capability to dynamically assign just L2 addresses
  * add the capability to specify a static ip address and get the L2 one
    allocated dynamically using the following syntax:
    ovn-nbctl lsp-set-addresses &lt;port&gt; "dynamic &lt;IP&gt;"
  * DPDK:
  - Add support for DPDK 18.11
  - Add support for port representors.
  * Userspace datapath:
  - Add option for simple round-robin based Rxq to PMD assignment.
    It can be set with pmd-rxq-assign.
  - Add support for Auto load balancing of PMDs (experimental)
  - Added new per-port configurable option to manage EMC:
    'other_config:emc-enable'.
  * Add 'symmetric_l3' hash function.
  * OVS now honors 'updelay' and 'downdelay' for bonds with LACP configured.
  * ovs-vswitchd:
  - New configuration option "offload-rebalance", that enables dynamic
    rebalancing of offloaded flows.
  * The environment variable OVS_RESOLV_CONF, if set, is now used
    as the DNS server configuration file.
  * RHEL packaging:
  - OVN packages are split from OVS packages. A new spec
    file - ovn-fedora.spec.in is added to generate OVN packages.
- Remove upstreamed patch:
  * 0001-python-c-ext-Fix-memory-leak-in-Parser_finish.patch
- Remove DISABLE_RESTART_ON_UPDATE and DISABLE_STOP_ON_REMOVAL options (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1550232000">- Obsolete old python[2]-openvswitch-test subpackages (bsc#1124435).</changelog>
  <changelog author="jcaamano@suse.com" date="1551355200">- Version bump to 2.11.0 (fate#325916, fate#325951, fate#326025, fate#326992).
  Some of the changes are:
  * Linux datapath:
  - Support for the kernel versions 4.16.x and 4.17.x.
  - Support for the kernel versions 4.18.x
  * OpenFlow:
  - OFPMP_TABLE_FEATURES_REQUEST can now modify table features.
  * ovs-ofctl:
  - "mod-table" command can now change OpenFlow table names.
  * The environment variable OVS_SYSLOG_METHOD, if set, is now used
    as the default syslog method.
  * The environment variable OVS_CTL_TIMEOUT, if set, is now used
    as the default timeout for control utilities.
  * ovn:
  - OVN-SB schema changed: duplicated IP with same Encapsulation type
    is not allowed any more.  Please refer to
    Documentation/intro/install/ovn-upgrades.rst for the instructions
    in case there are problems encountered when upgrading from an earlier
    version.
  - New support for IPSEC encrypted tunnels between hypervisors.
  - ovn-ctl: allow passing user:group ids to the OVN daemons.
  - IPAM/MACAM:
  * add the capability to dynamically assign just L2 addresses
  * add the capability to specify a static ip address and get the L2 one
    allocated dynamically using the following syntax:
    ovn-nbctl lsp-set-addresses &lt;port&gt; "dynamic &lt;IP&gt;"
  * DPDK:
  - Add support for DPDK 18.11
  - Add support for port representors.
  * Userspace datapath:
  - Add option for simple round-robin based Rxq to PMD assignment.
    It can be set with pmd-rxq-assign.
  - Add support for Auto load balancing of PMDs (experimental)
  - Added new per-port configurable option to manage EMC:
    'other_config:emc-enable'.
  * Add 'symmetric_l3' hash function.
  * OVS now honors 'updelay' and 'downdelay' for bonds with LACP configured.
  * ovs-vswitchd:
  - New configuration option "offload-rebalance", that enables dynamic
    rebalancing of offloaded flows.
  * The environment variable OVS_RESOLV_CONF, if set, is now used
    as the DNS server configuration file.
  * RHEL packaging:
  - OVN packages are split from OVS packages. A new spec
    file - ovn-fedora.spec.in is added to generate OVN packages.
- Revisit DISABLE_RESTART_ON_UPDATE and DISABLE_STOP_ON_REMOVAL options
  (bsc#1117483). DISABLE_STOP_ON_REMOVAL is removed. DISABLE_RESTART_ON_UPDATE
  is replaced by '%service_del_postun -n'. $FIRST_ARG is replaced by $1.
- Add extra openvswitch headers (bsc#1125897).</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1563192000">- Fix problem preventing new installs to run as non root (bsc#1132029,
  bsc#1139798), including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Version bump to bugfix release 2.11.1 (bsc#1130276). Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1565265600">- Update DPDK dependency to support DPDK 18.11.2.
- Use temporary directory for python build.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Disable dpdk on ix86, due to lack of proper SSE support.
- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
</package>
<package pkgid="65464bcf831d010838aebdbdd8262839e8972fab967004f9fcf9d4685885b8d7" name="liborcus" arch="src">
  <version epoch="0" ver="0.14.1" rel="lp151.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1414411200">- Fix build with boost-1.56
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.7.1:
  * Various boost bugfixes and update for new ixion
- Obsoleted patch:
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.9.2:
  * Various bugfixes and update for libreoffice 5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Use mdds 1.0
  * Use ixion 0.11
  * Use python3 instead of python2</changelog>
  <changelog author="fstrba@suse.com" date="1457438400">- Change package name to correspond to the soname  of the
  libraries provided.</changelog>
  <changelog author="tchvatal@suse.com" date="1462449600">- Coflict with liborcus-0_10-0</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Fix libixion -&gt; liborcus typo</changelog>
  <changelog author="dimstar@opensuse.org" date="1464177600">- Changes from version 0.11.1:
  + Fix for OSX build inside LibreOffice.
  + Boost.Filesystem is needed uncoditionally.</changelog>
  <changelog author="tchvatal@suse.com" date="1464177601">- Version update to 0.11.2:
  * Fix build with mdds 1.2
  * few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1 as required by lo 5.3</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Update to 0.13.1:
  * Required by libreoffice 6.0
  * Fixes many crashers
  * Speedup improvements
  * More features for xslx importer</changelog>
  <changelog author="tchvatal@suse.com" date="1513252800">- Switch license to MPL-2.0</changelog>
  <changelog author="tchvatal@suse.com" date="1515153600">- Fix python-xml dep to properly state python3-xml</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Version update to 0.13.2:
  * Various small fixes
  * Improvements in Excel 2003 XML import iflter</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Version update to 0.13.3:
  * Various improvements in 2003 XML imports
- Rename name-python3 to python3-name to match other python modules</changelog>
  <changelog author="tchvatal@suse.com" date="1519732800">- Version updat eto 0.13.4:
  * Various false positive fixes in detection of xml files</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- boost_1_67.patch: fix building with Boost 1.67 (bsc#1089811)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Version update to 0.14.1:
  * addressed a number of coverity issues.
  * Boost 1.67 support
    + Drop patch boost_1_67.patch
  * Various cell handling issues fixed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="60fc2d1c2fcbd5f8006819cfe9a15ab0cf3f957590e0cb69a0e2a4750af191d2" name="liborcus-0_14-0" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1414411200">- Fix build with boost-1.56
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.7.1:
  * Various boost bugfixes and update for new ixion
- Obsoleted patch:
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.9.2:
  * Various bugfixes and update for libreoffice 5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Use mdds 1.0
  * Use ixion 0.11
  * Use python3 instead of python2</changelog>
  <changelog author="fstrba@suse.com" date="1457438400">- Change package name to correspond to the soname  of the
  libraries provided.</changelog>
  <changelog author="tchvatal@suse.com" date="1462449600">- Coflict with liborcus-0_10-0</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Fix libixion -&gt; liborcus typo</changelog>
  <changelog author="dimstar@opensuse.org" date="1464177600">- Changes from version 0.11.1:
  + Fix for OSX build inside LibreOffice.
  + Boost.Filesystem is needed uncoditionally.</changelog>
  <changelog author="tchvatal@suse.com" date="1464177601">- Version update to 0.11.2:
  * Fix build with mdds 1.2
  * few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1 as required by lo 5.3</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Update to 0.13.1:
  * Required by libreoffice 6.0
  * Fixes many crashers
  * Speedup improvements
  * More features for xslx importer</changelog>
  <changelog author="tchvatal@suse.com" date="1513252800">- Switch license to MPL-2.0</changelog>
  <changelog author="tchvatal@suse.com" date="1515153600">- Fix python-xml dep to properly state python3-xml</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Version update to 0.13.2:
  * Various small fixes
  * Improvements in Excel 2003 XML import iflter</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Version update to 0.13.3:
  * Various improvements in 2003 XML imports
- Rename name-python3 to python3-name to match other python modules</changelog>
  <changelog author="tchvatal@suse.com" date="1519732800">- Version updat eto 0.13.4:
  * Various false positive fixes in detection of xml files</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- boost_1_67.patch: fix building with Boost 1.67 (bsc#1089811)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Version update to 0.14.1:
  * addressed a number of coverity issues.
  * Boost 1.67 support
    + Drop patch boost_1_67.patch
  * Various cell handling issues fixed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="a80ca44b9205ae4db6a6e7a718ae3f66441446a7f2c8b2963aee5d8a3cc6b265" name="liborcus-devel" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1414411200">- Fix build with boost-1.56
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.7.1:
  * Various boost bugfixes and update for new ixion
- Obsoleted patch:
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.9.2:
  * Various bugfixes and update for libreoffice 5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Use mdds 1.0
  * Use ixion 0.11
  * Use python3 instead of python2</changelog>
  <changelog author="fstrba@suse.com" date="1457438400">- Change package name to correspond to the soname  of the
  libraries provided.</changelog>
  <changelog author="tchvatal@suse.com" date="1462449600">- Coflict with liborcus-0_10-0</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Fix libixion -&gt; liborcus typo</changelog>
  <changelog author="dimstar@opensuse.org" date="1464177600">- Changes from version 0.11.1:
  + Fix for OSX build inside LibreOffice.
  + Boost.Filesystem is needed uncoditionally.</changelog>
  <changelog author="tchvatal@suse.com" date="1464177601">- Version update to 0.11.2:
  * Fix build with mdds 1.2
  * few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1 as required by lo 5.3</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Update to 0.13.1:
  * Required by libreoffice 6.0
  * Fixes many crashers
  * Speedup improvements
  * More features for xslx importer</changelog>
  <changelog author="tchvatal@suse.com" date="1513252800">- Switch license to MPL-2.0</changelog>
  <changelog author="tchvatal@suse.com" date="1515153600">- Fix python-xml dep to properly state python3-xml</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Version update to 0.13.2:
  * Various small fixes
  * Improvements in Excel 2003 XML import iflter</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Version update to 0.13.3:
  * Various improvements in 2003 XML imports
- Rename name-python3 to python3-name to match other python modules</changelog>
  <changelog author="tchvatal@suse.com" date="1519732800">- Version updat eto 0.13.4:
  * Various false positive fixes in detection of xml files</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- boost_1_67.patch: fix building with Boost 1.67 (bsc#1089811)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Version update to 0.14.1:
  * addressed a number of coverity issues.
  * Boost 1.67 support
    + Drop patch boost_1_67.patch
  * Various cell handling issues fixed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="e656d3b73fe5b1898e6bf2dbb2ecce25689c18143c7950b12bb765cd211715a0" name="liborcus-tools" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="lp151.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1414411200">- Fix build with boost-1.56
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1427198400">- Version bump to 0.7.1:
  * Various boost bugfixes and update for new ixion
- Obsoleted patch:
  * liborcus-boost-1.56.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version update to 0.9.2:
  * Various bugfixes and update for libreoffice 5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1457352000">- Version update to 0.11.0:
  * Use mdds 1.0
  * Use ixion 0.11
  * Use python3 instead of python2</changelog>
  <changelog author="fstrba@suse.com" date="1457438400">- Change package name to correspond to the soname  of the
  libraries provided.</changelog>
  <changelog author="tchvatal@suse.com" date="1462449600">- Coflict with liborcus-0_10-0</changelog>
  <changelog author="tchvatal@suse.com" date="1463054400">- Fix libixion -&gt; liborcus typo</changelog>
  <changelog author="dimstar@opensuse.org" date="1464177600">- Changes from version 0.11.1:
  + Fix for OSX build inside LibreOffice.
  + Boost.Filesystem is needed uncoditionally.</changelog>
  <changelog author="tchvatal@suse.com" date="1464177601">- Version update to 0.11.2:
  * Fix build with mdds 1.2
  * few small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1480766400">- Version update to 0.12.1 as required by lo 5.3</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1511956800">- Update to 0.13.1:
  * Required by libreoffice 6.0
  * Fixes many crashers
  * Speedup improvements
  * More features for xslx importer</changelog>
  <changelog author="tchvatal@suse.com" date="1513252800">- Switch license to MPL-2.0</changelog>
  <changelog author="tchvatal@suse.com" date="1515153600">- Fix python-xml dep to properly state python3-xml</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Version update to 0.13.2:
  * Various small fixes
  * Improvements in Excel 2003 XML import iflter</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Version update to 0.13.3:
  * Various improvements in 2003 XML imports
- Rename name-python3 to python3-name to match other python modules</changelog>
  <changelog author="tchvatal@suse.com" date="1519732800">- Version updat eto 0.13.4:
  * Various false positive fixes in detection of xml files</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- boost_1_67.patch: fix building with Boost 1.67 (bsc#1089811)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542283200">- Version update to 0.14.1:
  * addressed a number of coverity issues.
  * Boost 1.67 support
    + Drop patch boost_1_67.patch
  * Various cell handling issues fixed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1551960000">- Add missing dependency on libboost_system-devel</changelog>
</package>
<package pkgid="4566d567d92d6edbc7be8e3e0fcf0c3826e1c644bea7ae6b92b1ac8e9f7fcbb8" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1547467200">- Update to version 2.0.0+20190111.750c5bd01:
- cts-exec: still run the tests for the other resource classes even without python systemd bindings (bsc#1121808)</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 2.0.0+20190122.3f993c74f:
- crm_mon: remove duplicity of fence-action-state in xml-output
- cts: temporarily disable any enabled cluster serivces when running remote tests
- cts: service counts as enabled only if it's explicitly enabled</changelog>
  <changelog author="ygao@suse.com" date="1548417600">- Update to version 2.0.0+20190124.c3c9c6e66:
- scheduler: don't order non-DC shutdowns before DC fencing
- scheduler: improve fence action ordering
- scheduler: don't disable waiting for DC fencing
- libcrmservice: cancel DBus call when cancelling systemd/upstart actions
- libcrmservice: null-terminate string *before* printing it
- libcrmservice: improve logs when cleaning up an operation
- spec: add hint about sbd compatibility</changelog>
  <changelog author="ygao@suse.com" date="1548676800">- Update to version 2.0.0+20190125.788ee2c49:
- attrd: clear election dampening when the writer leaves
- libcrmcluster: *really* write only one election storm black box
- attrd: log previous writer *before* clearing it</changelog>
  <changelog author="ygao@suse.com" date="1548936000">- Update to version 2.0.0+20190130.57cc9c14b:
- CTS: really don't require nodes to be specified if listing tests (bsc#1114840)
- controller: really avoid closing attrd IPC for temporary failures
- controller: clear election dampening when DC is lost</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551355200">- Update to version 2.0.0+20190225.22ee9a769:
- scheduler: skip all native constraints for unmanaged resources
- scheduler: sort nodes when creating constraints</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551787200">- Update to version 2.0.1+20190304.9e909a5bd (Pacemaker-2.0.1):
- libcrmcommon: complete interrupted live migrations correctly</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551873600">- Update to version 2.0.1+20190304.1ac166cd3:
- build: Update pkgconfig files for libpe.
- libp-i: Add a pkgconfig file for libp-i.
- libs: Rename libpengine to libpacemaker-internal.
- tools: Add new validate options to crm_resource.
- Add HealthIOWait provider which checks hosts's IOWait
- tools: crm_resource --clear should print out what it does</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552392000">- Update to version 2.0.1+20190311.e91ee92e5:
- libfencing: Change return type on stonith_agent_exists.
- scheduler: cl#5301 - respect order constraints when relevant resources are being probed (bsc#1117934, bsc#1128374)</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552478400">- Update to version 2.0.1+20190312.059e2e26b:
- spec: move stonith_admin to -cli where it belongs
- tools: Add crm_rule.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379200">- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch
- Update to version 2.0.1+20190402.e091f4f0c:
- scheduler: one group stop shouldn't make another required
- libcrmcommon: compare_version: drop superfluous heap allocation
- libfencing: enumerate installed RHCS-style agents alpha-sorted
- xml diff'ing: prevent 'id' attribute reordering in "diff-removed"
- libcrmcommon: downplay "Creating RNG parser context" as debug prio
- controller: improve failed recurring action messages
- controller: improve lost action logs
- use common service interface for fence-agents and RAs
- libcrmcommon: allow whitespace in name/value pairs
- libcrmcommon: pcmk_nvpair_t should handle NULL values</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379201">- spec: no need to explicitly require the virtual dependency on libqb</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554379202">- Drop %if..%endif guards around %packages which does not
  affect the build result.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554811200">- Update to version 2.0.1+20190408.1b68da8e8:
- scheduler: avoid error log in harmless situation
- libcrmcommon: use INT_MIN/INT_MAX instead of -1 for out-of-range integers
- service-lib: avoid call-pattern leading to use-after-free
- libp-i: Renamed to libpacemaker.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554984000">- Rebase:
  bug-728579_pacemaker-stonith-dev-id.patch
- Revert "use common service interface for fence-agents and RAs" (bsc#1132123)
  * 0002-Revert-use-common-service-interface-for-fence-agents.patch
- Revert "service-lib: avoid call-pattern leading to use-after-free"
  * 0001-Revert-Fix-service-lib-avoid-call-pattern-leading-to.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1555588800">- Update to version 2.0.1+20190417.13d370ca9:
- controld: fix possible NULL pointer dereference (bsc#1131353, bsc#1131356)
- pacemakerd vs. IPC/procfs confused deputy authenticity issue (CVE-2018-16877, bsc#1131356) (CVE-2018-16878, bsc#1131353)
- libservices: fix use-after-free wrt. alert handling (CVE-2019-3885, bsc#1131357)
- executor: systemd starts should return UNKNOWN_ERROR instead of NOT_RUNNING
- pacemaker-remoted: improve proxy accept failure message
- executor: consider stonith resource stopped only if stop succeeded
- executor: improve stonith operation rc and status mapping
- executor: reschedule recurring stonith monitor if not connected
- executor: put recurring stonith failsafe stop in correct place</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556625600">- libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Fix-libcrmcommon-avoid-use-of-NULL-when-checking-whe.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556712000">- controller: avoid memory leak when duplicate monitor is scheduled
  * 0001-Low-controller-avoid-memory-leak-when-duplicate-moni.patch
- libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Low-libcrmcommon-return-proper-code-if-testing-pid-i.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1559908800">- stonith_admin --help: specify the usage of --cleanup (bsc#1135317)
  * bsc#1135317-0001-Low-stonith_admin-help-specify-the-usage-of-cleanup.patch
- controller: confirm cancel of failed monitors (bsc#1133866)
  * bsc#1133866-0001-Fix-controller-confirm-cancel-of-failed-monitors.patch
- libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716)
  * bsc#1127716-0003-Fix-libcrmcommon-return-error-when-applying-XML-diff.patch
- libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716)
  * bsc#1127716-0002-Fix-libcrmcommon-avoid-possible-use-of-NULL-when-app.patch
- libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716)
  * bsc#1127716-0001-Fix-libcrmcommon-correctly-apply-XML-diffs-with-mult.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1563192000">- scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511)
  * bsc#1130122-0001-Fix-scheduler-wait-for-probe-actions-to-complete-to-.patch
  * bsc#1130122-0002-Test-scheduler-wait-for-probe-actions-to-complete-to.patch</changelog>
</package>
<package pkgid="9e1a5bb35b60f080c69d2e3d8e897ba0c2b38b73562bbad9473fdb2f55f18618" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1547467200">- Update to version 2.0.0+20190111.750c5bd01:
- cts-exec: still run the tests for the other resource classes even without python systemd bindings (bsc#1121808)</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 2.0.0+20190122.3f993c74f:
- crm_mon: remove duplicity of fence-action-state in xml-output
- cts: temporarily disable any enabled cluster serivces when running remote tests
- cts: service counts as enabled only if it's explicitly enabled</changelog>
  <changelog author="ygao@suse.com" date="1548417600">- Update to version 2.0.0+20190124.c3c9c6e66:
- scheduler: don't order non-DC shutdowns before DC fencing
- scheduler: improve fence action ordering
- scheduler: don't disable waiting for DC fencing
- libcrmservice: cancel DBus call when cancelling systemd/upstart actions
- libcrmservice: null-terminate string *before* printing it
- libcrmservice: improve logs when cleaning up an operation
- spec: add hint about sbd compatibility</changelog>
  <changelog author="ygao@suse.com" date="1548676800">- Update to version 2.0.0+20190125.788ee2c49:
- attrd: clear election dampening when the writer leaves
- libcrmcluster: *really* write only one election storm black box
- attrd: log previous writer *before* clearing it</changelog>
  <changelog author="ygao@suse.com" date="1548936000">- Update to version 2.0.0+20190130.57cc9c14b:
- CTS: really don't require nodes to be specified if listing tests (bsc#1114840)
- controller: really avoid closing attrd IPC for temporary failures
- controller: clear election dampening when DC is lost</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551355200">- Update to version 2.0.0+20190225.22ee9a769:
- scheduler: skip all native constraints for unmanaged resources
- scheduler: sort nodes when creating constraints</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551787200">- Update to version 2.0.1+20190304.9e909a5bd (Pacemaker-2.0.1):
- libcrmcommon: complete interrupted live migrations correctly</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551873600">- Update to version 2.0.1+20190304.1ac166cd3:
- build: Update pkgconfig files for libpe.
- libp-i: Add a pkgconfig file for libp-i.
- libs: Rename libpengine to libpacemaker-internal.
- tools: Add new validate options to crm_resource.
- Add HealthIOWait provider which checks hosts's IOWait
- tools: crm_resource --clear should print out what it does</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552392000">- Update to version 2.0.1+20190311.e91ee92e5:
- libfencing: Change return type on stonith_agent_exists.
- scheduler: cl#5301 - respect order constraints when relevant resources are being probed (bsc#1117934, bsc#1128374)</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552478400">- Update to version 2.0.1+20190312.059e2e26b:
- spec: move stonith_admin to -cli where it belongs
- tools: Add crm_rule.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379200">- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch
- Update to version 2.0.1+20190402.e091f4f0c:
- scheduler: one group stop shouldn't make another required
- libcrmcommon: compare_version: drop superfluous heap allocation
- libfencing: enumerate installed RHCS-style agents alpha-sorted
- xml diff'ing: prevent 'id' attribute reordering in "diff-removed"
- libcrmcommon: downplay "Creating RNG parser context" as debug prio
- controller: improve failed recurring action messages
- controller: improve lost action logs
- use common service interface for fence-agents and RAs
- libcrmcommon: allow whitespace in name/value pairs
- libcrmcommon: pcmk_nvpair_t should handle NULL values</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379201">- spec: no need to explicitly require the virtual dependency on libqb</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554379202">- Drop %if..%endif guards around %packages which does not
  affect the build result.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554811200">- Update to version 2.0.1+20190408.1b68da8e8:
- scheduler: avoid error log in harmless situation
- libcrmcommon: use INT_MIN/INT_MAX instead of -1 for out-of-range integers
- service-lib: avoid call-pattern leading to use-after-free
- libp-i: Renamed to libpacemaker.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554984000">- Rebase:
  bug-728579_pacemaker-stonith-dev-id.patch
- Revert "use common service interface for fence-agents and RAs" (bsc#1132123)
  * 0002-Revert-use-common-service-interface-for-fence-agents.patch
- Revert "service-lib: avoid call-pattern leading to use-after-free"
  * 0001-Revert-Fix-service-lib-avoid-call-pattern-leading-to.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1555588800">- Update to version 2.0.1+20190417.13d370ca9:
- controld: fix possible NULL pointer dereference (bsc#1131353, bsc#1131356)
- pacemakerd vs. IPC/procfs confused deputy authenticity issue (CVE-2018-16877, bsc#1131356) (CVE-2018-16878, bsc#1131353)
- libservices: fix use-after-free wrt. alert handling (CVE-2019-3885, bsc#1131357)
- executor: systemd starts should return UNKNOWN_ERROR instead of NOT_RUNNING
- pacemaker-remoted: improve proxy accept failure message
- executor: consider stonith resource stopped only if stop succeeded
- executor: improve stonith operation rc and status mapping
- executor: reschedule recurring stonith monitor if not connected
- executor: put recurring stonith failsafe stop in correct place</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556625600">- libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Fix-libcrmcommon-avoid-use-of-NULL-when-checking-whe.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556712000">- controller: avoid memory leak when duplicate monitor is scheduled
  * 0001-Low-controller-avoid-memory-leak-when-duplicate-moni.patch
- libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Low-libcrmcommon-return-proper-code-if-testing-pid-i.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1559908800">- stonith_admin --help: specify the usage of --cleanup (bsc#1135317)
  * bsc#1135317-0001-Low-stonith_admin-help-specify-the-usage-of-cleanup.patch
- controller: confirm cancel of failed monitors (bsc#1133866)
  * bsc#1133866-0001-Fix-controller-confirm-cancel-of-failed-monitors.patch
- libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716)
  * bsc#1127716-0003-Fix-libcrmcommon-return-error-when-applying-XML-diff.patch
- libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716)
  * bsc#1127716-0002-Fix-libcrmcommon-avoid-possible-use-of-NULL-when-app.patch
- libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716)
  * bsc#1127716-0001-Fix-libcrmcommon-correctly-apply-XML-diffs-with-mult.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1563192000">- scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511)
  * bsc#1130122-0001-Fix-scheduler-wait-for-probe-actions-to-complete-to-.patch
  * bsc#1130122-0002-Test-scheduler-wait-for-probe-actions-to-complete-to.patch</changelog>
</package>
<package pkgid="7557d0c996d4448ff08b4c34f31a1f590a34dee6b0e222630d3478a3fc1a74fd" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1547467200">- Update to version 2.0.0+20190111.750c5bd01:
- cts-exec: still run the tests for the other resource classes even without python systemd bindings (bsc#1121808)</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 2.0.0+20190122.3f993c74f:
- crm_mon: remove duplicity of fence-action-state in xml-output
- cts: temporarily disable any enabled cluster serivces when running remote tests
- cts: service counts as enabled only if it's explicitly enabled</changelog>
  <changelog author="ygao@suse.com" date="1548417600">- Update to version 2.0.0+20190124.c3c9c6e66:
- scheduler: don't order non-DC shutdowns before DC fencing
- scheduler: improve fence action ordering
- scheduler: don't disable waiting for DC fencing
- libcrmservice: cancel DBus call when cancelling systemd/upstart actions
- libcrmservice: null-terminate string *before* printing it
- libcrmservice: improve logs when cleaning up an operation
- spec: add hint about sbd compatibility</changelog>
  <changelog author="ygao@suse.com" date="1548676800">- Update to version 2.0.0+20190125.788ee2c49:
- attrd: clear election dampening when the writer leaves
- libcrmcluster: *really* write only one election storm black box
- attrd: log previous writer *before* clearing it</changelog>
  <changelog author="ygao@suse.com" date="1548936000">- Update to version 2.0.0+20190130.57cc9c14b:
- CTS: really don't require nodes to be specified if listing tests (bsc#1114840)
- controller: really avoid closing attrd IPC for temporary failures
- controller: clear election dampening when DC is lost</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551355200">- Update to version 2.0.0+20190225.22ee9a769:
- scheduler: skip all native constraints for unmanaged resources
- scheduler: sort nodes when creating constraints</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551787200">- Update to version 2.0.1+20190304.9e909a5bd (Pacemaker-2.0.1):
- libcrmcommon: complete interrupted live migrations correctly</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551873600">- Update to version 2.0.1+20190304.1ac166cd3:
- build: Update pkgconfig files for libpe.
- libp-i: Add a pkgconfig file for libp-i.
- libs: Rename libpengine to libpacemaker-internal.
- tools: Add new validate options to crm_resource.
- Add HealthIOWait provider which checks hosts's IOWait
- tools: crm_resource --clear should print out what it does</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552392000">- Update to version 2.0.1+20190311.e91ee92e5:
- libfencing: Change return type on stonith_agent_exists.
- scheduler: cl#5301 - respect order constraints when relevant resources are being probed (bsc#1117934, bsc#1128374)</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552478400">- Update to version 2.0.1+20190312.059e2e26b:
- spec: move stonith_admin to -cli where it belongs
- tools: Add crm_rule.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379200">- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch
- Update to version 2.0.1+20190402.e091f4f0c:
- scheduler: one group stop shouldn't make another required
- libcrmcommon: compare_version: drop superfluous heap allocation
- libfencing: enumerate installed RHCS-style agents alpha-sorted
- xml diff'ing: prevent 'id' attribute reordering in "diff-removed"
- libcrmcommon: downplay "Creating RNG parser context" as debug prio
- controller: improve failed recurring action messages
- controller: improve lost action logs
- use common service interface for fence-agents and RAs
- libcrmcommon: allow whitespace in name/value pairs
- libcrmcommon: pcmk_nvpair_t should handle NULL values</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379201">- spec: no need to explicitly require the virtual dependency on libqb</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554379202">- Drop %if..%endif guards around %packages which does not
  affect the build result.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554811200">- Update to version 2.0.1+20190408.1b68da8e8:
- scheduler: avoid error log in harmless situation
- libcrmcommon: use INT_MIN/INT_MAX instead of -1 for out-of-range integers
- service-lib: avoid call-pattern leading to use-after-free
- libp-i: Renamed to libpacemaker.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554984000">- Rebase:
  bug-728579_pacemaker-stonith-dev-id.patch
- Revert "use common service interface for fence-agents and RAs" (bsc#1132123)
  * 0002-Revert-use-common-service-interface-for-fence-agents.patch
- Revert "service-lib: avoid call-pattern leading to use-after-free"
  * 0001-Revert-Fix-service-lib-avoid-call-pattern-leading-to.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1555588800">- Update to version 2.0.1+20190417.13d370ca9:
- controld: fix possible NULL pointer dereference (bsc#1131353, bsc#1131356)
- pacemakerd vs. IPC/procfs confused deputy authenticity issue (CVE-2018-16877, bsc#1131356) (CVE-2018-16878, bsc#1131353)
- libservices: fix use-after-free wrt. alert handling (CVE-2019-3885, bsc#1131357)
- executor: systemd starts should return UNKNOWN_ERROR instead of NOT_RUNNING
- pacemaker-remoted: improve proxy accept failure message
- executor: consider stonith resource stopped only if stop succeeded
- executor: improve stonith operation rc and status mapping
- executor: reschedule recurring stonith monitor if not connected
- executor: put recurring stonith failsafe stop in correct place</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556625600">- libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Fix-libcrmcommon-avoid-use-of-NULL-when-checking-whe.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556712000">- controller: avoid memory leak when duplicate monitor is scheduled
  * 0001-Low-controller-avoid-memory-leak-when-duplicate-moni.patch
- libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Low-libcrmcommon-return-proper-code-if-testing-pid-i.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1559908800">- stonith_admin --help: specify the usage of --cleanup (bsc#1135317)
  * bsc#1135317-0001-Low-stonith_admin-help-specify-the-usage-of-cleanup.patch
- controller: confirm cancel of failed monitors (bsc#1133866)
  * bsc#1133866-0001-Fix-controller-confirm-cancel-of-failed-monitors.patch
- libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716)
  * bsc#1127716-0003-Fix-libcrmcommon-return-error-when-applying-XML-diff.patch
- libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716)
  * bsc#1127716-0002-Fix-libcrmcommon-avoid-possible-use-of-NULL-when-app.patch
- libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716)
  * bsc#1127716-0001-Fix-libcrmcommon-correctly-apply-XML-diffs-with-mult.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1563192000">- scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511)
  * bsc#1130122-0001-Fix-scheduler-wait-for-probe-actions-to-complete-to-.patch
  * bsc#1130122-0002-Test-scheduler-wait-for-probe-actions-to-complete-to.patch</changelog>
</package>
<package pkgid="838a4c811c0c6354b55756300c82824ae62f81bfb6055e571cdc286a26fa3e57" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1547467200">- Update to version 2.0.0+20190111.750c5bd01:
- cts-exec: still run the tests for the other resource classes even without python systemd bindings (bsc#1121808)</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 2.0.0+20190122.3f993c74f:
- crm_mon: remove duplicity of fence-action-state in xml-output
- cts: temporarily disable any enabled cluster serivces when running remote tests
- cts: service counts as enabled only if it's explicitly enabled</changelog>
  <changelog author="ygao@suse.com" date="1548417600">- Update to version 2.0.0+20190124.c3c9c6e66:
- scheduler: don't order non-DC shutdowns before DC fencing
- scheduler: improve fence action ordering
- scheduler: don't disable waiting for DC fencing
- libcrmservice: cancel DBus call when cancelling systemd/upstart actions
- libcrmservice: null-terminate string *before* printing it
- libcrmservice: improve logs when cleaning up an operation
- spec: add hint about sbd compatibility</changelog>
  <changelog author="ygao@suse.com" date="1548676800">- Update to version 2.0.0+20190125.788ee2c49:
- attrd: clear election dampening when the writer leaves
- libcrmcluster: *really* write only one election storm black box
- attrd: log previous writer *before* clearing it</changelog>
  <changelog author="ygao@suse.com" date="1548936000">- Update to version 2.0.0+20190130.57cc9c14b:
- CTS: really don't require nodes to be specified if listing tests (bsc#1114840)
- controller: really avoid closing attrd IPC for temporary failures
- controller: clear election dampening when DC is lost</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551355200">- Update to version 2.0.0+20190225.22ee9a769:
- scheduler: skip all native constraints for unmanaged resources
- scheduler: sort nodes when creating constraints</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551787200">- Update to version 2.0.1+20190304.9e909a5bd (Pacemaker-2.0.1):
- libcrmcommon: complete interrupted live migrations correctly</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1551873600">- Update to version 2.0.1+20190304.1ac166cd3:
- build: Update pkgconfig files for libpe.
- libp-i: Add a pkgconfig file for libp-i.
- libs: Rename libpengine to libpacemaker-internal.
- tools: Add new validate options to crm_resource.
- Add HealthIOWait provider which checks hosts's IOWait
- tools: crm_resource --clear should print out what it does</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552392000">- Update to version 2.0.1+20190311.e91ee92e5:
- libfencing: Change return type on stonith_agent_exists.
- scheduler: cl#5301 - respect order constraints when relevant resources are being probed (bsc#1117934, bsc#1128374)</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1552478400">- Update to version 2.0.1+20190312.059e2e26b:
- spec: move stonith_admin to -cli where it belongs
- tools: Add crm_rule.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379200">- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch
- Update to version 2.0.1+20190402.e091f4f0c:
- scheduler: one group stop shouldn't make another required
- libcrmcommon: compare_version: drop superfluous heap allocation
- libfencing: enumerate installed RHCS-style agents alpha-sorted
- xml diff'ing: prevent 'id' attribute reordering in "diff-removed"
- libcrmcommon: downplay "Creating RNG parser context" as debug prio
- controller: improve failed recurring action messages
- controller: improve lost action logs
- use common service interface for fence-agents and RAs
- libcrmcommon: allow whitespace in name/value pairs
- libcrmcommon: pcmk_nvpair_t should handle NULL values</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554379201">- spec: no need to explicitly require the virtual dependency on libqb</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554379202">- Drop %if..%endif guards around %packages which does not
  affect the build result.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554811200">- Update to version 2.0.1+20190408.1b68da8e8:
- scheduler: avoid error log in harmless situation
- libcrmcommon: use INT_MIN/INT_MAX instead of -1 for out-of-range integers
- service-lib: avoid call-pattern leading to use-after-free
- libp-i: Renamed to libpacemaker.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554984000">- Rebase:
  bug-728579_pacemaker-stonith-dev-id.patch
- Revert "use common service interface for fence-agents and RAs" (bsc#1132123)
  * 0002-Revert-use-common-service-interface-for-fence-agents.patch
- Revert "service-lib: avoid call-pattern leading to use-after-free"
  * 0001-Revert-Fix-service-lib-avoid-call-pattern-leading-to.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1555588800">- Update to version 2.0.1+20190417.13d370ca9:
- controld: fix possible NULL pointer dereference (bsc#1131353, bsc#1131356)
- pacemakerd vs. IPC/procfs confused deputy authenticity issue (CVE-2018-16877, bsc#1131356) (CVE-2018-16878, bsc#1131353)
- libservices: fix use-after-free wrt. alert handling (CVE-2019-3885, bsc#1131357)
- executor: systemd starts should return UNKNOWN_ERROR instead of NOT_RUNNING
- pacemaker-remoted: improve proxy accept failure message
- executor: consider stonith resource stopped only if stop succeeded
- executor: improve stonith operation rc and status mapping
- executor: reschedule recurring stonith monitor if not connected
- executor: put recurring stonith failsafe stop in correct place</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556625600">- libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Fix-libcrmcommon-avoid-use-of-NULL-when-checking-whe.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1556712000">- controller: avoid memory leak when duplicate monitor is scheduled
  * 0001-Low-controller-avoid-memory-leak-when-duplicate-moni.patch
- libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356)
  * bsc#1131353-bsc#1131356-0001-Low-libcrmcommon-return-proper-code-if-testing-pid-i.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1559908800">- stonith_admin --help: specify the usage of --cleanup (bsc#1135317)
  * bsc#1135317-0001-Low-stonith_admin-help-specify-the-usage-of-cleanup.patch
- controller: confirm cancel of failed monitors (bsc#1133866)
  * bsc#1133866-0001-Fix-controller-confirm-cancel-of-failed-monitors.patch
- libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716)
  * bsc#1127716-0003-Fix-libcrmcommon-return-error-when-applying-XML-diff.patch
- libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716)
  * bsc#1127716-0002-Fix-libcrmcommon-avoid-possible-use-of-NULL-when-app.patch
- libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716)
  * bsc#1127716-0001-Fix-libcrmcommon-correctly-apply-XML-diffs-with-mult.patch</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1563192000">- scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511)
  * bsc#1130122-0001-Fix-scheduler-wait-for-probe-actions-to-complete-to-.patch
  * bsc#1130122-0002-Test-scheduler-wait-for-probe-actions-to-complete-to.patch</changelog>
</package>
<package pkgid="8b0441b9f684239c9cd820efad441787803f8e1e2317bcd4a7beadc845779012" name="libpackagekit-glib2-18" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="8da5f18c84321d4e28af524b27f204ebea07cb328649b9deeb8273a544170ab9" name="libpackagekit-glib2-18" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="5f31928b2b8f0766980fc3e5d14134209babf3f3059a2e3afa2a457aa62cb31d" name="libpackagekit-glib2-18" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="328419bab75534bffde3ea618b850bdfe9e676ebd5d5e6f3d401bfc68235e42a" name="libpackagekit-glib2-18" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="9aa7e8de2f2d9fe144c3f413727ace8d5e23b8d86f3c2cf2e9ebb28f5c674c7e" name="libpackagekit-glib2-18-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="b6b1ceb42c992c33217d86c63f7c6083f8bb12b86ba0a54d8389ce2cbdee8296" name="libpackagekit-glib2-18-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="13e81946c32f7aedfda2b9606223c3914370bdc620b665fce543d4ffcaaa5c84" name="libpackagekit-glib2-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="a7d6949a2a5a8751a9937811fad3ec37d48bdfd215cf65a33bd24feb1e6a099c" name="libpackagekit-glib2-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="8ba57dfda73fd9c35ce4d1dec6ba8ce02f538141f843b250d9d418d5316f54fc" name="libpackagekit-glib2-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="4bc3cd558bbf83b869d74190ffcf260878b3d1f4897dfc20ec4c6e32eb70de0a" name="libpackagekit-glib2-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="5e311a7398f5c4259e770a6760051c62298aa37ebd5f9dc620db02c926008484" name="libpackagekit-glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="08c2256addaa110991b4a402b2a4667e2efbe99fe1f6d72c0eeb4897faeec566" name="libpackagekit-glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.6.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1568116800">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
</package>
<package pkgid="0d43c9dee1faae6e58487a7e02b53a18daa06658b4a9934569328194f89b0f42" name="libpainter0" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="lp151.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1470052800">- Add obs source services:
  + tar_scm
  + recompress
  + set_version
- Update to version 0.9.0~git.1456906198.f422461:
  Fix tarball naming from 0.9.0git to 0.9.0~git to conform openSUSE
  naming scheme for pre-release version.
  + Numlock out of sync fix
  + neutrinordp: minor changes, coding style, log level
  + Update faq-compile.txt
  + Change to allow authentication against all authentication
    methods.
  + Add details for crypt_level=fips to man page
  + libxrdp: no logic change, tabs to spaces
  + libxrdp: opps, fix typeo
  + Fix "\ _" on jp keyboard
  + xrdp_keyboard.ini: Fix jp keyboard model
  + update xorgxrdp
  + add keyboard options to xrdp_client_info
  + xorgxrdp=68412e5
- Add an extra legacy service action force_stop:
  Forcefully killing xrdp processes when it cannot be stopped
  normally.
  Usage:
    $ service xrdp force_stop
    or
    $ rcxrdp force_stop
- Merge X11:RemoteDesktop and SLE package, unfortunately we have to
  drop the original X11:RemoteDesktop xrdp changelog due to
  unresolvable chronological inconsistences with the SLE changelog.
  + Add xrdp-default-config.patch:
    Rebased from contribution of cyberorg@opensuse.org in original
    X11:RemoteDesktop package. Adjust various default settings to
    openSUSE standards including removing dysfunctional backend
    entries from xrdp login UI (bsc#989309).
  + Add xrdp-openSUSE-logo.patch:
    Split from xrdp-default-config.patch. Add openSUSE logo to xrdp
    login UI.
    Add openSUSE.bmp:
    Taken from the original X11:RemoteDesktop package, the logo.
  + Add xrdp-fix-buildtime-warnings.patch:
    Fix buid time warnings, backported from commit ded462a.
  + Drop xrdp-lsb.patch:
    SysV and LSB init scripts are no longer supported by systemd
    (bnc#442211).
  + Update xrdp-avahi.diff (bnc#586785).
  + Update xrdp-pam.patch (bnc#441750).
  + Update xrdp-bsc965647-allow-admin-choose-desktop.patch
    (bsc#984834).
  + Upbate xrdp-fate318398-change-expired-password.patch
    (FATE#318398).
  + Cleanup specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1472558400">- Add xrdp-disable-8-bpp-vnc-support.patch:
  Disable 8 bpp vnc support. Xvnc drops support for 8 bpp since
  1.4.0. Trying to launch Xvnc in 8 bpp will cause it to dump core
  (bsc#991059).</changelog>
  <changelog author="jengelh@inai.de" date="1474804800">- Trim/fixup summary and description. Use faster find -delete.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1485950400">- Backport upstream patches for 32bpp support (bsc#1022098)
  - Add xrdp-Allow-sessions-with-32-bpp.patch.patch
  - Add xrdp-vnc-enable-32-bpp-support-for-Xvnc-it-actually-works.patch
  - Add xrdp-Fix-support-for-32-bpp-clients-connecting-to-16-bpp-.patch</changelog>
  <changelog author="fezhang@suse.com" date="1486382400">- Add xrdp-fate319683-allow-vnc-resizing.patch:
  Add support for ExtendedDesktopSize VNC extension into xrdp's VNC
  client to allow it to do resizing, so that returning clients can
  reconnect to session if their resolutions changed (FATE#319683,
  bsc#948062).</changelog>
  <changelog author="fezhang@suse.com" date="1494504000">- Update xrdp-fate319683-allow-vnc-resizing.patch:
  + Fix a crash caused by double freeing stream (bsc#1034606).
  + Remove DisplaySize from Xvnc default policy to enable it
    resizing.</changelog>
  <changelog author="fezhang@suse.com" date="1495108800">- Add xrdp-dont-set-LANG.patch: Backport upstream commit 5575197,
  sesman should stop setting LANG and let initialization scripts
  take care of it (bsc#1023988).</changelog>
  <changelog author="ftake@geeko.jp" date="1495281600">- Update to version 0.9.2
  + RemoteFX codec and Bitmap updates support are enabled
  + TLS ciphers suites and version, and connected computer name is
    now logged
  + Miscellaneous RemoteFX codec mode improvements
  + Move auth/pam calls to appropriate locations, fix potential
    bypass in PAM (bsc#1029912, #694, #704, CVE-2017-6967).
- Update to version 0.9.1
  + Support for TLS security layer (preferred over RDP layer
    if supported by the client)
  + Support for disabling deprecated SSLv3 protocol and
    selecting custom cipher suites in xrdp.ini
  + Support for bidirectional fastpath
    (enabled in both directions by default)
  + More configurable login screen
  + Support for new virtual channels:
  - rdpdr: device redirection
  - rdpsnd: audio output
  - cliprdr: clipboard
  - xrdpvr: xrdp video redirection channel
    (can be used along with NeutrinoRDP client)
  + Support for disabling virtual channels globally or
    by session type
  + Allow to specify the path for backends (Xorg, X11rdp, Xvnc)
  + Multi-monitor support
  + xrdp-chansrv stores logs in ${XDG_DATA_HOME}/xrdp now
  + Fix VNC password file that was based on clear text user
    password (boo#1015567 CVE-2013-1430)
  + Fix 3 bytes PDU handling (boo#1100453)
- New sub packages for shared libraries and development files
  + libpainter0
  + librfxencode0
  + xrdp-devel
- Drop patches merged by the upstream
  + xrdp-fix-buildtime-warnings.patch
  + xrdp-Allow-sessions-with-32-bpp.patch.patch
  + xrdp-vnc-enable-32-bpp-support-for-Xvnc-it-actually-works.patch
  + xrdp-Fix-support-for-32-bpp-clients-connecting-to-16-bpp-.patch
  + xrdp-dont-set-LANG.patch
- Refresh patches
  + xrdp-pam.patch
  - its main part has been merged by the upstream
  + xrdp-default-config.patch
  - keep to use Xvnc as a default backend instread of Xorg
    (upstream default)
  + xrdp-disable-8-bpp-vnc-support.patch
  + xrdp-openSUSE-logo.patch
- Add xrdp-do-not-execute-psuedo-login-shell.patch
  + prevent ~/.profile from being executed twice</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Remove filler wording from description.
- Rectify RPM groups and little errors in the summaries.</changelog>
  <changelog author="fezhang@suse.com" date="1498392000">- Rebase SLE patches:
  + xrdp-avahi.diff
  + xrdp-bsc965647-allow-admin-choose-desktop.patch
  + xrdp-fate318398-change-expired-password.patch
  + xrdp-fate319683-allow-vnc-resizing.patch</changelog>
  <changelog author="fezhang@suse.com" date="1499774400">- Add source verification:
  + Add xrdp-0.9.2.tar.gz.asc
  + Add xrdp.keyring: add key from upstream signer (Idan Freiberg,
    speidy@github, 337B1F18)
- Drop _service and _servicedata: not needed for stable releases
- Drop xrdp-openSUSE-logo.patch and openSUSE.bmp: not really
  necessary</changelog>
  <changelog author="fezhang@suse.com" date="1500465600">- Update to version 0.9.3
  + Log user-friendly messages when certificate/privkey is
    inaccessible
  + Now sesman sets mandatory LOGNAME environment variable #725
  + Now sesman ensures socket directory present #801
  + Exit with failure status if port already in use #644
  + Fix glitches with IPv4 struct initialization #803
  + Fix some keyboard layout integration (UK, Spanish)
  + Fix handle OS when IPv6 disabled #714
  + Fix issues around systemd session #778
  + Fix protocol error when 32 bit color and non RemoteFX session
    [#737] #804
  + Fix sesadmin shows error when no sessions #797
  + Fix TLS spins 100% CPU #728
  + Fix Xvnc backend disconnects when some data copied to clipboard
    [#755]
  + Optimize startwm.sh for SUSE
  * Drop xrdp-do-not-execute-psuedo-login-shell.patch
  + Update xrdp-avahi.diff
- Update xrdp.keyring: add key from upstream signer (Koichiro IWAO,
  metalefty@github, 01BF10EB)</changelog>
  <changelog author="ftake@geeko.jp" date="1502712000">- Add workaround for the upstream issue #848, fix xrdp does not
  start by wrong path in *.service.</changelog>
  <changelog author="fezhang@suse.com" date="1506600000">- Update to version 0.9.4
  + Accept prefill credentials in base64 form #153 #811
  + Indroduce AAC encoder to audio redirection (requires Windows 10
    client)
  + Fix ocasional SEGV in drive redirection #838
  + Fix client's IP addresses in xrdp-sesman.log are always logged
    as 0.0.0.0 #878 #882
  + Fix ls_background_image didn't accept full path #776 #853
  + Fix misuse of hidelogwindow #414 #876
  + Fix WTSVirtualChannelWrite return code #859
  + Fix no longer needed socket files remained in the socket dir
    [#812] #831
  + Make creating socket path a bit more robust #823
  + Add Belgian keyboard #858
  + Drop workaround for #848, fixed in upstream</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fezhang@suse.com" date="1515067200">- Update to version 0.9.5
  + Security fixes
  - Fix local denial of service (boo#1069591 CVE-2017-16927) #958
    [#979]
  + New features
  - Add a new log level TRACE more verbose than DEBUG #835 #944
  - SSH agent forwarding via RDP #867 #868 FreeRDP/FreeRDP#4122
  - Support horizontal wheel properly #928
  + Bug fixes
  - Avoid use of hard-coded sesman port #895 (boo#1060644)
  - Workaround for corrupted display with Windows Server 2008
    using NeutrinoRDP #869
  - Fix glitch in audio redirection by AAC #910 #936
  - Implement vsock support #930 #935 #948
  - Avoid 100% CPU usage on SSL accept #956
  + Other changes
  - Add US Dvorak keyboard #929
  - Suppress some misleading logs #964
  - Add Finnish keyboard #972
  - Add more user-friendlier description about Xorg config #974
  - Renew pulseaudio document #984 #985
  - Lots of cleanups and refactoring
  + Known issues
  - Audio redirection by MP3 codec doesn't sound with some
    client, use AAC instead #965
- Update xrdp-default-config.patch
- Update xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="fezhang@suse.com" date="1521720000">- Update xrdp-fate319683-allow-vnc-resizing.patch: Fix interface
  call incompatibleness (bsc#1064602, bsc#1075163)</changelog>
  <changelog author="fezhang@suse.com" date="1522152000">- Update to version 0.9.6
  + Compatibility notice
  - Exclamation mark has been removed from comment out symbol of
    config files #1033
  + Bug fixes
  - Make listen check before daemon fork #988
  - Fix xrdp sometimes become zombie processes #1000
  - Include hostname in sesman password file name #1006 #1007
    [#1076]
  - Fix default startwm.sh to use bash explicitly #1009 #1049
  + Other changes
  - Add Swiss French keyboard #1053
  - Improve perfect forward secrecy, explicitly enable ECDHE/DHE
    [#1024] #1052 #1063
  - Lots of leak fixes, cleanups and refactoring
- Enable IPv6 (boo#1083105)
- Refresh xrdp-bsc965647-allow-admin-choose-desktop.patch</changelog>
  <changelog author="fezhang@suse.com" date="1523880000">- Add --enable-painter configure flag to avoid error 0xd06 for
  certain Android RDP clients (boo#1031910, #246)</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568116800">- Add xrdp-systemd-services.patch: Let systemd handle the daemons,
  fix daemon start failures (boo#1138954, boo#1144327).</changelog>
</package>
<package pkgid="22c3430cb7951fcbee3e76b2c22e2325050f2d4b4336509756172a42b795afa8" name="libparted0" arch="i586">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="sparschauer@suse.de" date="1497528000">- Add a swap flag for dasd/gpt and handle it like gdisk/fdasd
  (bsc#1044536, fate#314888)
  - add: parted-mkpart-set-a-swap-flag-if-available.patch
  - add: libparted-set-swap-flag-on-GPT-partitions.patch
  - add: libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502366400">- parted: mkpart: Allow empty string "" for the GPT partition name
  in script mode (bsc#1023818, boo#1032562)
  - add: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502452800">- Amend parsing of empty GPT partition names to require quoted
  empty strings '""' or "''" (bsc#1023818, boo#1032562)
  - amend: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502798400">- Fix s390x --wipesignatures regression caused by fate#320525
  (bsc#1047031)
  - amend: parted-implement-wipesignatures-option.patch
  - refresh: 0002-dasd-enhance-device-probing.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1503576000">- Drop using deprecated configure option "--disable-Werror"
- Drop (SUSE specific) support for hybrid pMBR (gpt_sync_mbr
  label) (fate#317849, bsc#1041322)
  - remove: parted-gpt-mbr-sync.patch
  - remove: libparted-ppc-prepboot-in-syncmbr.patch
  - remove: parted-workaround-windows7-gpt-implementation.patch
  - refresh patches
- libparted: Fix starting CHS in protective MBR (bsc#969165)
  - add: libparted-fix-starting-CHS-in-protective-MBR.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304000">- Fix partition naming for dm devices not ending in a digit and
  also fix resizing of dm partitions (bsc#1056508)
  - amend: libparted-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304001">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
</package>
<package pkgid="da04d26fe791f992a8a36ca4f7aa976f08c3f971575e110929249c21377a68da" name="libparted0" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="sparschauer@suse.de" date="1497528000">- Add a swap flag for dasd/gpt and handle it like gdisk/fdasd
  (bsc#1044536, fate#314888)
  - add: parted-mkpart-set-a-swap-flag-if-available.patch
  - add: libparted-set-swap-flag-on-GPT-partitions.patch
  - add: libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502366400">- parted: mkpart: Allow empty string "" for the GPT partition name
  in script mode (bsc#1023818, boo#1032562)
  - add: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502452800">- Amend parsing of empty GPT partition names to require quoted
  empty strings '""' or "''" (bsc#1023818, boo#1032562)
  - amend: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502798400">- Fix s390x --wipesignatures regression caused by fate#320525
  (bsc#1047031)
  - amend: parted-implement-wipesignatures-option.patch
  - refresh: 0002-dasd-enhance-device-probing.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1503576000">- Drop using deprecated configure option "--disable-Werror"
- Drop (SUSE specific) support for hybrid pMBR (gpt_sync_mbr
  label) (fate#317849, bsc#1041322)
  - remove: parted-gpt-mbr-sync.patch
  - remove: libparted-ppc-prepboot-in-syncmbr.patch
  - remove: parted-workaround-windows7-gpt-implementation.patch
  - refresh patches
- libparted: Fix starting CHS in protective MBR (bsc#969165)
  - add: libparted-fix-starting-CHS-in-protective-MBR.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304000">- Fix partition naming for dm devices not ending in a digit and
  also fix resizing of dm partitions (bsc#1056508)
  - amend: libparted-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304001">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
</package>
<package pkgid="5c5d4093fcf8306b614989eda539ecf2c81f5f408fe92eea1367e46ec9a3b98b" name="libparted0-32bit" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp151.9.3.1"/>
  <changelog author="sparschauer@suse.de" date="1497528000">- Add a swap flag for dasd/gpt and handle it like gdisk/fdasd
  (bsc#1044536, fate#314888)
  - add: parted-mkpart-set-a-swap-flag-if-available.patch
  - add: libparted-set-swap-flag-on-GPT-partitions.patch
  - add: libparted-dasd-add-swap-flag-handling-for-DASD-CDL.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502366400">- parted: mkpart: Allow empty string "" for the GPT partition name
  in script mode (bsc#1023818, boo#1032562)
  - add: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502452800">- Amend parsing of empty GPT partition names to require quoted
  empty strings '""' or "''" (bsc#1023818, boo#1032562)
  - amend: parted-mkpart-allow-empty-gpt-part-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1502798400">- Fix s390x --wipesignatures regression caused by fate#320525
  (bsc#1047031)
  - amend: parted-implement-wipesignatures-option.patch
  - refresh: 0002-dasd-enhance-device-probing.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1503576000">- Drop using deprecated configure option "--disable-Werror"
- Drop (SUSE specific) support for hybrid pMBR (gpt_sync_mbr
  label) (fate#317849, bsc#1041322)
  - remove: parted-gpt-mbr-sync.patch
  - remove: libparted-ppc-prepboot-in-syncmbr.patch
  - remove: parted-workaround-windows7-gpt-implementation.patch
  - refresh patches
- libparted: Fix starting CHS in protective MBR (bsc#969165)
  - add: libparted-fix-starting-CHS-in-protective-MBR.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304000">- Fix partition naming for dm devices not ending in a digit and
  also fix resizing of dm partitions (bsc#1056508)
  - amend: libparted-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505304001">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="Anna Maresova &lt;anicka@suse.com&gt;" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
</package>
<package pkgid="54b92b7eebd6e615440d5b6ec82030ce332713b2b93f9cbf347c72ec1e6fb66d" name="libpcap" arch="src">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1346068800">- BuildRequire libusb-devel for "usb sniffing"</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1379073600">- update to 1.4.0:
  * add netfilter/nfqueue interface
  * support IPv6 filter expressions when no IPv6 address resolution
    availavle
  * Fix pcap-config to include -lpthread if canusb support is
    present
  * Try to fix "pcap_parse not defined" problems when --without-flex
    and --without-bison are used when you have Flex and Bison
  * Fix some issues with the pcap_loop man page.
  * Fix pcap_getnonblock() and pcap_setnonblock() to fill in the
    supplied error message buffer
  * Fix typo that, it appeared, would cause pcap-libdlpi.c not to
    compile (perhaps systems with libdlpi also have BPF and use
    that instead)
  * Catch attempts to call pcap_compile() on a non-activated pcap_t
  * Fix crash on Linux with CAN-USB support without usbfs
  * Fix addition of VLAN tags for Linux cooked captures
  * Check for both EOPNOTSUPP and EINVAL after SIOCETHTOOL ioctl, so
    that the driver can report either one if it doesn't support
    SIOCETHTOOL
  * Add DLT_INFINIBAND and DLT_SCTP
  * Describe "proto XXX" and "protochain XXX" in the pcap-filter man
    page
  * Handle either directories, or symlinks to directories, that
    correspond to interfaces in /sys/class/net
  * Fix handling of VLAN tag insertion to check, on Linux 3.x
    kernels, for VLAN tag valid flag
  * Clean up some man pages
  * Support libnl3 as well as libnl1 and libnl2 on Linux
- packaging changes:
  * build with libnl
  * refresh libpcap-ocloexec.patch for upstream changes
  * verify source signatures</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1387022400">- update to 1.5.2
  Version 1.5.0 revised for non-code related edits Version,
  1.5.1 revised for for interop against Linux 3.1.0
  * TPACKET_V3 support added for Linux
  * Point users to the the-tcpdump-group repository on GitHub
    rather than the mcr repository
  * Checks added for malloc()/realloc()/etc. failures
  * Support filtering filtering E1 SS7 traffic on MTP2 layer Annex A
  * Use "ln -s" to link man pages by default
  * Added pcap_open_dead_with_tstamp_precision API interface.
  * Many changes to autoconf to deal better with non-GCC compilers
    added many new DLT types
- require pkg-config for devel library support detection
- add support for D-Bus capture
- modified patches for upstream changes:
  * libpcap-ocloexec.patch
  * libpcap-1.0.0-filter-fix.patch to libpcap-1.5.2-filter-fix.patch</changelog>
  <changelog author="vcizek@suse.com" date="1392292800">- update to 1.5.3
  * Don't let packets that don't match the current filter get to the
    application when TPACKET_V3 is used. (GitHub issue #331)
  * Fix handling of pcap_loop()/pcap_dispatch() with a packet count
    of 0 on some platforms (including Linux with TPACKET_V3).
    (GitHub issue #333)
  * Work around TPACKET_V3 deficiency that causes packets to be lost
    when a timeout of 0 is specified. (GitHub issue #335)
  * Man page formatting fixes.
- refreshed libpcap-1.5.2-filter-fix.patch</changelog>
  <changelog author="vcizek@suse.com" date="1392292801">- added support for netlink (bnc#863823)
  * libpcap-netlink.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1408276800">- libpcap 1.6.1:
  * some fixes for the any device
  * changes for how --enable-XXX works
- includes changes from 1.6.0:
  * fixes for byte order issues with NFLOG captures
  * Handle using cooked mode for DLT_NETLINK in activate_new().
    removing libpcap-netlink.patch, upstream, [bnc#863823]
  * on platforms where you can not capture on down interfaces, do
    not list them, but: do list interfaces which are down, if you
    can capture on them!
- libpcap does not build with bluez 5.21, disable bluetooth
  ( bluetooth/mgmt.h moved to kernel )</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409745600">- libpcap 1.6.2:
  * Don't crash on filters testing a non-existent link-layer type
    field.
  * Fix sending in non-blocking mode on Linux with memory-mapped
    capture.
  * Fix timestamps when reading pcap-ng files on big-endian
    machines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="2399cdebe2f5260512b86a6d0b7b21d103ab99ff431c3da6a589aaf4642d0286" name="libpcap-devel" arch="i586">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="10aea2c29505846122d28c35ea5111c21c0a879541a2e7849db52d3b87d2374d" name="libpcap-devel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="973150fbd198a8d7d1f01332865c4dbd5f1971bcac1a6e05a0ade2f9ca21e38a" name="libpcap-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="0c2df00921b606f6be7434ba07c71e0578a20d08293753da3e70ecca3615fe24" name="libpcap-devel-static" arch="i586">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="ebcabf6025394da61d5abad9d742347b2b17ac562d8d155b0cc879ac6689cc24" name="libpcap-devel-static" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="d0706f83fec72fad0ee7b2ced1d97e9cd6ac7c06a9997c76cea137c64ac4397d" name="libpcap1" arch="i586">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="2a5be2f58cd947a625ae2b7e555e6d3dcbf077db7df3800334a7c3c7db1ef015" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="319b4a7dd56b9ba8db216c9fd950cf3a88e63ccbb9abaeea2ddc39fc194c30a1" name="libpcap1-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570536000">- Security update: [bsc#1153332, CVE-2019-15165, CVE-2018-16301]
  * CVE-2019-15165 Do sanity checks on PHB header length before allocating memory.
  * CVE-2018-16301 Errors in pcapng reading.
- Add libpcap-CVE-2019-15165.patch</changelog>
</package>
<package pkgid="83ac16d975eb717f4c3963cc4ccb187ddc7064c89e3304fafbe4fff001d6785b" name="libply-boot-client4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="c99ca11d9c7b45c4fea5b3135c75a21e8ca3af531e22b9185e6a360936761daa" name="libply-boot-client4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="b3dd3c76c21d7d4af8db13bfe35f1fc46bccc02de2f5b333aa639c27d7d69f13" name="libply-splash-core4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="51a5b433272ee22c3fec2af1dbb2937ff85b19e8b1c5893888503579736d36f2" name="libply-splash-core4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="651b5e0855f571279ce2fa481ac8d9c2cbe1d297f1fdebd6f37bafd72ac3c40f" name="libply-splash-graphics4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="4696f2e31fb0f2d153c341c07bce5397d9c5288cfc2b7724d63fe962755949c7" name="libply-splash-graphics4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="e515a88f9df4d843920539b542cde9ab1482944e92f90646e63e798dd857929f" name="libply4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="fabdedc173befec0dff66937b38ec66e65e342928a7a5fad766ebf44a85b3c2a" name="libply4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="5758404e438734911aa113f4b3b336a8b4449681163720fb9b9937ee60740644" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="18.08.8" rel="lp151.2.3.1"/>
  <changelog author="eich@suse.com" date="1542715200">- Update to 18.08.3
  * Add new burst buffer state of "teardown-fail" to indicate the burst
    buffer teardown operation is failing on specific buffers.
  * Multiple backup slurmctld daemons can be configured
  * Enable jobs with zero node count for creation and/or deletion of persistent
    burst buffers.
  * Add "scontrol show dwstat" command to display Cray burst buffer status.
  * Add "GetSysStatus" option to burst_buffer.conf file.
  * Add node and partition configuration options of "CpuBind" to control
    default task binding.
  * Add "NumaCpuBind" option to knl.conf
  * Add sbatch "--batch" option to identify features required on batch node.
  * Add "BatchFeatures" field to output of "scontrol show job".
  * Add support for "--bb" option to sbatch command.
  * Add new SystemComment field to job data structure and database.
  * Expand reservation "flags" field from 32 to 64 bits.
  * Add job state flag of "SIGNALING" to avoid race condition.
  * Properly handle srun --will-run option when there are jobs in COMPLETING
    state.
  * Properly report who is signaling a step.
  * Don't combine updated reservation records in sreport's reservation report.
  * node_features plugin - Add suport for XOR &amp; XAND of job constraints (node
    feature specifications).
  * Improvements to how srun searches for the executible when using cwd.
  * Now programs can be checked before execution if test_exec is set.
  * Report NodeFeatures plugin configuration with scontrol and sview commands.
  * Add acct_gather_profile/influxdb plugin.
  * Add new job state of SO/STAGE_OUT
  * Correct SLURM_NTASKS and SLURM_NPROCS environment variable for
    heterogeneous job step.
  * Expand advanced reservation feature specification to support parenthesis
    and counts of nodes with specified features.
  * Defer job signaling until prolog is completed
  * Have the primary slurmctld wait until the backup has completely shutdown
    before taking control.
  * Fix issue where unpacking job state after TRES count changed could lead to
    invalid reads.
  * Heterogeneous job steps allocations supported with Open MPI.
  * Remove redundant function arguments from task plugins.
  * Add Slurm configuration file check logic using "slurmctld -t" command.
  * Add the use of a xml file to help performance when using hwloc.
  * Remove support for "ChosLoc" configuration parameter.
  * Configuration parameters "ControlMachine", "ControlAddr",
    "BackupController" and "BackupAddr" replaced by an ordered list of
    "SlurmctldHost" records.
  * Remove --immediate option from sbatch.
  * Add infrastructure for per-job and per-step TRES parameters.
  * Add DefCpuPerGpu and DefMemPerGpu to global and per-partition configuration
    parameters.
  * Add ValidateMode configuration parameter to knl_cray.conf.
  * Disable local PTY output processing when using 'srun --unbuffered'.
  * Change the column name for the %U (User ID) field in squeue to 'UID'.
  * CRAY - Add CheckGhalQuiesce to the CommunicationParameters.
  * When a process is core dumping, avoid terminating other processes in that
    task group.
  * CPU frequency management enhancements: If scaling_available_frequencies
    file is not available, then derive values from scaling_min_freq and
    scaling_max_freq values.
  * Add pending jobs count to sdiag output.
  * Add configuration paramerers SlurmctldPrimaryOnProg and
    SlurmctldPrimaryOffProg, which define programs to execute when a slurmctld
    daemon changes state.
  * Add configuration paramerers SlurmctldAddr for use with virtual IP to
    manage backup slurmctld daemons.
  * Explicitly shutdown the slurmd process when instructed to reboot.
  * Add ability to create/update partition with TRESBillingWeights through
    scontrol.
  * Calcuate TRES billing values at submission.
  * Add node_features plugin function "node_features_p_reboot_weight()".
  * Add NodeRebootWeight parameter to knl.conf configuration file.
  * Completely remove "gres" field from step record. Use "tres_per_node",
    "tres_per_socket", etc.
  * Add "Links" parameter to gres.conf configuration file.
  * Force slurm_mktime() to set tm_isdst to -1.
  * burst_buffer.conf - Add SetExecHost flag to enable burst buffer access
    from the login node for interactive jobs.
  * Append ", with requeued tasks" to job array "end" emails if any tasks in
    the array were requeued.
  * Add ResumeFailProgram slurm.conf option to specify a program that is called
    when a node fails to respond by ResumeTimeout.
  * Add new job pending reason of "ReqNodeNotAvail, reserved for maintenance".
  * Remove AdminComment += syntax from 'scontrol update job'.
  * sched/backfill: Reset job time limit if needed for deadline scheduling.
  * For heterogeneous job component with required nodes, explicitly exclude
    those nodes from all other job components.
  * Add name of partition used to output of srun --test-only output.
  * sdiag output now reports outgoing slurmctld message queue contents.
  * Improve escaping special characters on user commands when specifying paths.
  * Add salloc/sbatch/srun option of --gres-flags=disable-binding to disable
    filtering of CPUs with respect to generic resource locality.
  * SlurmDBD - Print warning if MySQL/MariaDB internal tuning is not at least
    half of the recommended values.
  * Add ability to specify a node reason when rebooting nodes with "scontrol
    reboot".
  * Add nextstate option to "scontrol reboot".
  * Consider "resuming" (nextstate=resume) nodes as available in backfill
    future scheduling.
  * Add TimelimitRaw sacct output field to display timelimit numbers.
  * Add support for sacct --whole-hetjob=[yes|no] option.
  * Make salloc handle node requests the same as sbatch.
  * Add shutdown_on_reboot SlurmdParameter to control whether the Slurmd will
    shutdown itself down or not when a reboot request is received.
  * Add cancel_reboot scontrol option to cancel pending reboot of nodes.
  * Make Users case insensitive in the database based on
    Parameters=PreserveCaseUser in the slurmdbd.conf.
  * Improve scheduling when dealing with node_features that could have a
    boot delay.
  * Changed the default AuthType for slurmdbd to auth/munge.
  * Added 'remote-fs.target' to After directive of slurmd.service file.
  * Remove drain on node when reboot nextstate used.
  * Speed up pack of job's qos.
  * Add sacctmgr options to prevent/manage job queue stuffing:
  - GrpJobsAccrue=&lt;max_jobs&gt;
  - MaxJobsAccrue=&lt;max_jobs&gt;
  * MinPrioThreshold
    Minimum priority required to reserve resources when scheduling.
  * Add control_inx value to trigger_info_msg_t to permit future work in the
    trigger management code to distinguish which of multiple backup controllers
    has changed state.
  * NOTES:
    PreemptType=preempt/job_prio has been removed - use PreemptType=preempt/qos
    instead.
  * Bluegene support was deprecated has now been removed
  * cgroup_allowed_devices_file.conf was removed. It was never used by
    default, as ConstrainDevices was not set. If needed, refer to the
    cgroups.conf man page on how to create one.
  * slurm.epilog.clean: Removed. User should use pam_slurm_adopt instead.
- Refreshed:
  * removed-deprecated-xdaemon.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * slurmsmwd-uses-xdaemon_-for-systemd.patch
  * slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch</changelog>
  <changelog author="eich@suse.com" date="1542715201">- Moved config man pages to a separate package: This way, they won't
  get installed on compute nodes.</changelog>
  <changelog author="eich@suse.com" date="1542715202">- Moved HTML docs to doc package.</changelog>
  <changelog author="eich@suse.com" date="1542715203">- Added missing perl-base dependency.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1544011200">- fixed code in %pretrans section to be compatible with lua 5.1</changelog>
  <changelog author="cgoll@suse.com" date="1544443200">- restarting services on update only when activated
- added rotation of logs
- Added backported patches which harden the pam module pam_slurm_adopt
  (BOO#1116758) which will be in slurm 19.05.x
  * added pam_slurm_adopt-avoid-running-outside-of-the-sshd-PA.patch
    [PATCH 1/3] pam_slurm_adopt: avoid running outside of the sshd PAM
  * added pam_slurm_adopt-send_user_msg-don-t-copy-undefined-d.patch
    [PATCH 2/3] pam_slurm_adopt: send_user_msg: don't copy undefined data
  * added pam_slurm_adopt-use-uid-to-determine-whether-root-is.patch
    [PATCH 3/3] pam_slurm_adopt: use uid to determine whether root is
    logging on
- package slurm-pam_slurm now depends on slurm-node and not on slurm</changelog>
  <changelog author="cgoll@suse.com" date="1544702400">- Update to 18.08.04, with following highlights
  * Fix message sent to user to display preempted instead of time limit when
    a job is preempted.
  * Fix memory leak when a failure happens processing a nodes gres config.
  * Improve error message when failures happen processing a nodes gres config.
  * Don't skip jobs in scontrol hold.
  * Allow --cpu-bind=verbose to be used with SLURM_HINT environment variable.
  * Enhanced handling for runaway jobs
  * cons_res: Delay exiting cr_job_test until after cores/cpus are calculated
    and distributed.
  * Don't check existence of srun --prolog or --epilog executables when set to
    "none" and SLURM_TEST_EXEC is used.
  * Add "P" suffix support to job and step tres specifications.
  * Fix jobacct_gather/cgroup to work correctly when more than one task is
    started on a node.
  * salloc - set SLURM_NTASKS_PER_CORE and SLURM_NTASKS_PER_SOCKET in the
    environment if the corresponding command line options are used.
  * slurmd - fix handling of the -f flag to specify alternate config file
    locations.
  * Add SchedulerParameters option of bf_ignore_newly_avail_nodes to avoid
    scheduling lower priority jobs on resources that become available during
    the backfill scheduling cycle when bf_continue is enabled.
  * job_submit/lua: Add several slurmctld return codes and add user/group info
  * salloc/sbatch/srun - print warning if mutually exclusive options of --mem
    and --mem-per-cpu are both set.
  - Refreshed:
  * pam_slurm_adopt-avoid-running-outside-of-the-sshd-PA.patch</changelog>
  <changelog author="eich@suse.com" date="1548936000">- Update to version 18.08.05:
  * Add mitigation for a potential heap overflow on 32-bit systems in xmalloc.
    (CVE-2019-6438, bsc#1123304).
  * Other fixes:
    + Backfill - If a job has a time_limit guess the end time of a job better
    if OverTimeLimit is Unlimited.
    + Fix "sacctmgr show events event=cluster"
    + Fix sacctmgr show runawayjobs from sibling cluster
    + Avoid bit offset of -1 in call to bit_nclear().
    + Insure that "hbm" is a configured GresType on knl systems.
    + Fix NodeFeaturesPlugins=node_features/knl_generic to allow other gres
    other than knl.
    + cons_res: Prevent overflow on multiply.
    + Better debug for bad values in gres.conf.
    + Fix double accounting of energy at end of job.
    + Read gres.conf for cloud nodes on slurmctld.
    + Don't assume the first node of a job is the batch host when purging jobs
    from a node.
    + Better debugging when a job doesn't have a job_resrcs ptr.
    + Store ave watts in energy plugins.
    + Add XCC plugin for reading Lenovo Power.
    + Fix minor memory leak when scheduling rebootable nodes.
    + Fix debug2 prefix for sched log.
    + Fix printing correct SLURM_JOB_ACCOUNT_PACK_GROUP_* in env for a Het Job.
    + sbatch - search current working directory first for job script.
    + Make it so held jobs reset the AccrueTime and do not count against any
    AccrueTime limits.
    + Add SchedulerParameters option of bf_hetjob_prio=[min|avg|max] to alter
    the job sorting algorithm for scheduling heterogeneous jobs.
    + Fix initialization of assoc_mgr_locks and slurmctld_locks lock
    structures.
    + Fix segfault with job arrays using X11 forwarding.
    + Revert regression caused by e0ee1c7054 which caused negative values and
    values starting with a decimal to be invalid for PriorityWeightTRES and
    TRESBillingWeight.
    + Fix possibility to update a job's reservation to none.
    + Suppress connection errors to primary slurmdbd when backup dbd is active.
    + Suppress connection errors to primary db when backup db kicks in
    + Add missing fields for sacct --completion when using jobcomp/filetxt.
    + Fix incorrect values set for UserCPU, SystemCPU, and TotalCPU sacct
    fields when JobAcctGatherType=jobacct_gather/cgroup.
    + Fixed srun from double printing invalid option msg twice.
    + Remove unused -b flag from getopt call in sbatch.
    + Disable reporting of node TRES in sreport.
    + Re-enabling features combined by OR within parenthesis for non-knl
    setups.
    + Prevent sending duplicate requests to reboot a node before ResumeTimeout.
    + Down nodes that don't reboot by ResumeTimeout.
    + Update seff to reflect API change from rss_max to tres_usage_in_max.
    + Add missing TRES constants from perl API.
    + Fix issue where sacct would return incorrect array tasks when querying
    specific tasks.
    + Add missing variables to slurmdb_stats_t in the perlapi.
    + Fix nodes not getting reboot RPC when job requires reboot of nodes.
    + Fix failing update the partition list of a job.
    + Use slurm.conf gres ids instead of gres.conf names to get a gres type
    name.
  * Disable
    slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
    Believed to be fixed by commit c1a537dbbe6
    See: https://bugs.schedmd.com/show_bug.cgi?id=5511
  * Add
    Fix-contrib-perlapi-to-build-with-the-fix-for-CVE-2019-6438-750cc23ed.patch:
    Fix fallout from 750cc23ed for CVE-2019-6438.</changelog>
  <changelog author="eich@suse.com" date="1548936001">- Update to version 18.08.05-2:
  This version obsoletes:
  Fix-contrib-perlapi-to-build-with-the-fix-for-CVE-2019-6438-750cc23ed.patch
- Fix spec file for older SUSE versions.</changelog>
  <changelog author="eich@suse.com" date="1549022400">- Add backward compatibility with SLE-11 SP4</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1551268800">- added the hdf5 job data gathering plugin</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1562414400">- Add support for version updates on SLE: Update packages to a
  later version than the version supported originally on SLE
  will receive a version string in their package name.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1562414401">- Do not build hdf5 support where not available.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1562414402">- Update SLURM to 18.08.7:
  * Set debug statement to debug2 to avoid benign error messages.
  * Add SchedulerParameters option of bf_hetjob_immediate to attempt to start
    a heterogeneous job as soon as all of its components are determined able
    to do so.
  * Fix underflow causing decay thread to exit.
  * Fix main scheduler not considering hetjobs when building the job queue.
  * Fix regression for sacct to display old jobs without a start time.
  * Fix setting correct number of gres topology bits.
  * Update hetjobs pending state reason when appropriate.
  * Fix accounting_storage/filetxt's understanding of TRES.
  * Set Accrue time when not enforcing limits.
  * Fix srun segfault when requesting a hetjob with test_exec or bcast
    options.
  * Hide multipart priorities log message behind Priority debug flag.
  * sched/backfill - Make hetjobs sensitive to bf_max_job_start.
  * Fix slurmctld segfault due to job's partition pointer NULL dereference.
  * Fix issue with OR'ed job dependencies.
  * Add new job's bit_flags of INVALID_DEPEND to prevent rebuilding a job's
    dependency string when it has at least one invalid and purged dependency.
  * Promote federation unsynced siblings log message from debug to info.
  * burst_buffer/cray - fix slurmctld SIGABRT due to illegal read/writes.
  * burst_buffer/cray - fix memory leak due to unfreed job script content.
  * node_features/knl_cray - fix script_argv use-after-free.
  * burst_buffer/cray - fix script_argv use-after-free.
  * Fix invalid reads of size 1 due to non null-terminated string reads.
  * Add extra debug2 logs to identify why BadConstraints reason is set.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1562587200">- Add BuildRequires to address warnings during build:
  * for libcurl-devel, libssh2-devel and rrdtool-devel
  * for libjson-c-devel and liblz4-devel where available,
    disable these with --without-json and --without-lz4
    where not.
  * disable DataWarp (--without-datawarp).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1562587201">- Fix build dependency issue around libibmad-devel introduced
  in SLE-12-SP4.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562846400">- Updated to 18.08.8 for fixing CVE-2019-12838 and (bsc#1140709)
  * Update "xauth list" to use the same 10000ms timeout as the other xauth
    commands.
  * Fix issue in gres code to handle a gres cnt of 0.
  * Don't purge jobs if backfill is running.
  * Verify job is pending add/removing accrual time.
  * Don't abort when the job doesn't have an association that was removed
    before the job was able to make it to the database.
  * Set state_reason if select_nodes() fails job for QOS or Account.
  * Avoid seg_fault on referencing association without a valid_qos bitmap.
  * If Association/QOS is removed on a pending job set that job as ineligible.
  * When changing a jobs account/qos always make sure you remove the old limits.
  * Don't reset a FAIL_QOS or FAIL_ACCOUNT job reason until the qos or
    account changed.
  * Restore "sreport -T ALL" functionality.
  * Correctly typecast signals being sent through the api.
  * Properly initialize structures throughout Slurm.
  * Sync "numtask" squeue format option for jobs and steps to "numtasks".
  * Fix sacct -PD to avoid CA before start jobs.
  * Fix potential deadlock with backup slurmctld.
  * Fixed issue with jobs not appearing in sacct after dependency satisfied.
  * Fix showing non-eligible jobs when asking with -j and not -s.
  * Fix issue with backfill scheduler scheduling tasks of an array
    when not the head job.
  * accounting_storage/mysql - fix SIGABRT in the archive load logic.
  * accounting_storage/mysql - fix memory leak in the archive load logic.
  * Limit records per single SQL statement when loading archived data.
  * Fix unnecessary reloading of job submit plugins.
  * Allow job submit plugins to be turned on/off with a reconfigure.
  * Fix segfault when loading/unloading Lua job submit plugin multiple times.
  * Fix printing duplicate error messages of jobs rejected by job submit plugin.
  * Fix printing of job submit plugin messages of het jobs without pack id.
  * Fix memory leak in group_cache.c
  * Fix jobs stuck from FedJobLock when requeueing in a federation
  * Fix requeueing job in a federation of clusters with differing associations
  * sacctmgr - free memory before exiting in 'sacctmgr show runaway'.
  * Fix seff showing memory overflow when steps tres mem usage is 0.
  * Upon archive file name collision, create new archive file instead of
    overwriting the old one to prevent lost records.
  * Limit archive files to 50000 records per file so that archiving large
    databases will succeed.
  * Remove stray newlines in SPANK plugin error messages.
  * Fix archive loading events.
  * In select/cons_res: Only allocate 1 CPU per node with the --overcommit and
  - -nodelist options.
  * Fix main scheduler from potentially not running through whole queue.
  * cons_res/job_test - prevent a job from overallocating a node memory.
  * cons_res/job_test - fix to consider a node's current allocated memory when
    testing a job's memory request.
  * Fix issue where multi-node job steps on cloud nodes wouldn't finish cleaning
    up until the end of the job (rather than the end of the step).
  * Fix issue with a 17.11 sbcast call to a 18.08 daemon.
  * Add new job bit_flags of JOB_DEPENDENT.
  * Make it so dependent jobs reset the AccrueTime and do not count against any
    AccrueTime limits.
  * Fix sacctmgr --parsable2 output for reservations and tres.
  * Prevent slurmctld from potential segfault after job_start_data() called
    for completing job.
  * Fix jobs getting on nodes with "scontrol reboot asap".
  * Record node reboot events to database.
  * Fix node reboot failure message getting to event table.
  * Don't write "(null)" to event table when no event reason exists.
  * Fix minor memory leak when clearing runaway jobs.
  * Avoid flooding slurmctld and logging when prolog complete RPC errors occur.
  * Fix GCC 9 compiler warnings.
  * Fix seff human readable memory string for values below a megabyte.
  * Fix dump/load of rejected heterogeneous jobs.
  * For heterogeneous jobs, do not count the each component against the QOS or
    association job limit multiple times.
  * slurmdbd - avoid reservation flag column corruption with the use of newer
    flags, instead preserve the older flag fields that we can still fit in the
    smallint field, and discard the rest.
  * Fix security issue in accounting_storage/mysql plugin on archive file loads
    by always escaping strings within the slurmdbd. CVE-2019-12838.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562932800">- added cray depend libraries to seperate package, as they are now
  built, since json is enabled</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1563105600">- Fix build for SLE-11-SP4 and older.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1566043200">- Fix logic of slurm-munge recommends: slurm-munge requires munge
  already, so if we have munge installed we recommend slurm-munge
  as the authentication when installing slurm or slurm-node.</changelog>
</package>
<package pkgid="1cca0f6357073b0069b9e31d4ce421d09753faea42cf0012fef34babec1b7a0d" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="7b4f9235836bc9061b9eb081250fe65c5c5cae37de3f8c0dc2fa27d4167f3add" name="libpng16-16" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="49b1d5eb204333b590661130900b9849400fd7f9dcedfaed29075d5cb81652de" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="854209239a8ae226c0a5ffa4ee161b321c7a4455dd73a800ab96641b952d9eeb" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="f4cff9ad285ac3b8a7ad05619d21491e483f37040049710802547b0f5c099409" name="libpng16-compat-devel" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="3280a465aee11d35d413e1c6f04e74a5d1ca455e79b384f1402f1049c808482c" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="e4dbbabb7d58a302047d92b4f7fd10b25f56cfd0c8677f451dbd1f962dea77fc" name="libpng16-compat-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="63a473c43a83491b0de9727c1cc921c53694491d4bd724a937e7fce2cb36c9ac" name="libpng16-devel" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="61c3d3804e866bb838da548907101be20ba8522c40775bf4d5ea0d389b807ba7" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="b9c0b395af437b4f327503eec391ca43ff77857ed5900bcadb01a32e5753634b" name="libpng16-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="445334350cfba050300f370f69b7da46c5383a46f0e5bd69e1762faa772ad3e2" name="libpng16-tools" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="c8d396dd6e6dceca82369df79b9b052763de62b96b1b30a1790cc4e658254411" name="libpng16-tools" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="ebf081d2827936624946e54939628e0962d0ce7a5bff2889c213e5b0cea6ccd7" name="libpolkit0" arch="i586">
  <version epoch="0" ver="0.114" rel="lp151.5.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
</package>
<package pkgid="03663836ad7f3d10184a224d90d81a99ff7d725846bd3383bb71760159b595c7" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp151.5.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
</package>
<package pkgid="23ec941cd75efc55033c1cf9633aad93e46a30fa41a928778ebc25565c36a7bd" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp151.5.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
</package>
<package pkgid="653cc3129f61fba8d9e4efd4328b1295a7b3319a0102eb2c5ef7b84b64fdbb30" name="libpq5" arch="i586">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="1265a59d65c65f89542f766a7e6817055f5641bd8d71321d04849cd95bd9d608" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="f0340398e40d7c22eae355becd15b9ffe1649faa0e82139c00201ce75042a4c5" name="libpq5" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="a229aa8d401e62a60323a3c5771847a13b5ce5c2851abb2de077ddbeae501970" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="cef29f39fb98e89448a9ab4d36105be6b178f64d00fd4e4386c7839ae0f29e2c" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.10" rel="lp151.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565697600">- Update to 10.10:
  * https://www.postgresql.org/about/news/1960/
  * https://www.postgresql.org/docs/10/release-10-10.html
  * CVE-2019-10208, bsc#1145092: TYPE in pg_temp executes arbitrary
    SQL during SECURITY DEFINER execution.</changelog>
</package>
<package pkgid="bad0f1c3cd6fb641ead8cbf787cd9d450bb678c5025e4a812bf7005b506535de" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="0890a89fc3886257734c5d497c665c690f23995cde4ad7258a177eb4eabc2612" name="libprocps7" arch="i586">
  <version epoch="0" ver="3.3.15" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1468238400">- Update to procps-ng-3.3.12
  * libprocps API 6:0:0
  * build: formerly optional --enable-oomem unconditional
  * free: man document rewritten for shared                Debian #755233
  * free: interpret intervals in non-locale way            Debian #692113
  * kill: report error if cannot kill process              Debian #733172
  * library: refine calculation of 'cached' memory
  * library: find tty quicker                              Debian #770215
  * library: eliminate threads display inconsistencies     Redhat #1284091
  * pidof: check cmd if space found in argv0
  * pmap: fixed detail parsing on long mapping lines
  * pmap: fix occasional incorrect memory usage values     Redhat #1262864
  * ps: sort by cgroup                                     Debian #692279
  * ps: display control group name with -o cgname
  * ps: fallback to attr/current for context               Debian #786956
  * ps: enabled broken 'thcount' option                    Redhat #1174313
  * tests: conditionally add prctl                         Debian #816237
  * top: displays the 3 new linux-4.5 RES memory fields
  * top: man page memory fields corrected + new narrative
  * top: added display of CGNAME (control group name)
  * top: is now more responsive to cpus brought online
  * top: namespace cols use suppressible zero
  * top: zero suppress ('0') includes out-of-memory &amp; nice
  * top: better 'i' toggle management when scrolled
  * top: the '=' key now includes active locate requests
  * vmstat: devices exceeding 15 chars now displayed       Redhat #586078
  * watch: hostname added to header
  * watch: better handling ANSI including esc[m            Debian #830313
  * watch: use locale-independent float                    Debian #692113</changelog>
  <changelog author="werner@suse.de" date="1468324800">- Use test suite but avoid the w command due dummy utmp
  * This requires dejagnu for the runtest command
  * This requires screen to be able to provide a tty
- Add patch procps-ng-3.3.12-strtod.patch to fix missed extern
  declaration of strtod_nol_or_err()</changelog>
  <changelog author="werner@suse.de" date="1470744000">- Avoid fillup and insserv on modern systems (bsc#992845)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): The latter was merged into
  libsystemd in version 209.</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Explain option --no-truncate of command w</changelog>
  <changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.12-sysctl-a.patch (bsc#1039941, had been
  accepted upstream) that is allow content lines below /proc/sys
  longer than 1024 characters</changelog>
  <changelog author="mpluskal@suse.com" date="1497614400">- Drop support for xinetd (systat.xinetd)
  * xinetd is being obsoleted
  * provided service is considered unsecure and is unlikely to be
    used anyways
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
</package>
<package pkgid="e9853cca9656433952b2cf0631299e4a0f98aa980d33af95650e0746c89cc673" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="lp151.6.3.1"/>
  <changelog author="werner@suse.de" date="1468238400">- Update to procps-ng-3.3.12
  * libprocps API 6:0:0
  * build: formerly optional --enable-oomem unconditional
  * free: man document rewritten for shared                Debian #755233
  * free: interpret intervals in non-locale way            Debian #692113
  * kill: report error if cannot kill process              Debian #733172
  * library: refine calculation of 'cached' memory
  * library: find tty quicker                              Debian #770215
  * library: eliminate threads display inconsistencies     Redhat #1284091
  * pidof: check cmd if space found in argv0
  * pmap: fixed detail parsing on long mapping lines
  * pmap: fix occasional incorrect memory usage values     Redhat #1262864
  * ps: sort by cgroup                                     Debian #692279
  * ps: display control group name with -o cgname
  * ps: fallback to attr/current for context               Debian #786956
  * ps: enabled broken 'thcount' option                    Redhat #1174313
  * tests: conditionally add prctl                         Debian #816237
  * top: displays the 3 new linux-4.5 RES memory fields
  * top: man page memory fields corrected + new narrative
  * top: added display of CGNAME (control group name)
  * top: is now more responsive to cpus brought online
  * top: namespace cols use suppressible zero
  * top: zero suppress ('0') includes out-of-memory &amp; nice
  * top: better 'i' toggle management when scrolled
  * top: the '=' key now includes active locate requests
  * vmstat: devices exceeding 15 chars now displayed       Redhat #586078
  * watch: hostname added to header
  * watch: better handling ANSI including esc[m            Debian #830313
  * watch: use locale-independent float                    Debian #692113</changelog>
  <changelog author="werner@suse.de" date="1468324800">- Use test suite but avoid the w command due dummy utmp
  * This requires dejagnu for the runtest command
  * This requires screen to be able to provide a tty
- Add patch procps-ng-3.3.12-strtod.patch to fix missed extern
  declaration of strtod_nol_or_err()</changelog>
  <changelog author="werner@suse.de" date="1470744000">- Avoid fillup and insserv on modern systems (bsc#992845)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): The latter was merged into
  libsystemd in version 209.</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Explain option --no-truncate of command w</changelog>
  <changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.12-sysctl-a.patch (bsc#1039941, had been
  accepted upstream) that is allow content lines below /proc/sys
  longer than 1024 characters</changelog>
  <changelog author="mpluskal@suse.com" date="1497614400">- Drop support for xinetd (systat.xinetd)
  * xinetd is being obsoleted
  * provided service is considered unsecure and is unlikely to be
    used anyways
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
</package>
<package pkgid="f16deaf88534601bd2d397c3afce081007c1539299841dc7d7a695f0ecf46564" name="libpython2_7-1_0" arch="i586">
  <version epoch="0" ver="2.7.14" rel="lp151.10.10.2"/>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1569412800">- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1570536000">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="7776a9f3f389ecda2f6ccfc0c2e57438eb1ba6b2c906df9952185daeacf90d9f" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.10.2"/>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1569412800">- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1570536000">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="2691925e97f760193e3c0e805c5793502a1b1ddb369f2ad052fe797aa81794bc" name="libpython2_7-1_0" arch="i586">
  <version epoch="0" ver="2.7.14" rel="lp151.10.3.1"/>
  <changelog author="jmatejek@suse.com" date="1442232000">- copy strict-tls-checks subpackage from SLE to retain future compatibility
  (not built in openSUSE)
- do this properly to fix bnc#945401</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
</package>
<package pkgid="59e08fed06200a0da88589c343aa1e4a78a8d544d7ee33a1202c0f86063de55d" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.3.1"/>
  <changelog author="jmatejek@suse.com" date="1442232000">- copy strict-tls-checks subpackage from SLE to retain future compatibility
  (not built in openSUSE)
- do this properly to fix bnc#945401</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
</package>
<package pkgid="ecd3676aa6791e18a1254d79d21aa639b2ad0d8438d53058b17679ff5d99654d" name="libpython2_7-1_0" arch="i586">
  <version epoch="0" ver="2.7.14" rel="lp151.10.7.1"/>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
</package>
<package pkgid="d339cd111c9992f7d4549bd6365bcf9f30caa9c3f3786f5b2fb799b1b2d2f3ae" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.7.1"/>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
</package>
<package pkgid="dcdcd7d7a445c2c951458c0a97157a23b38194a07d01f3302c8aada7ec01b4c0" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.10.2"/>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1569412800">- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1570536000">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="229085e036027020e9a7ddf2f781f3eb8201a8d5d5ccb8bc544a0b4d59b864aa" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.3.1"/>
  <changelog author="jmatejek@suse.com" date="1442232000">- copy strict-tls-checks subpackage from SLE to retain future compatibility
  (not built in openSUSE)
- do this properly to fix bnc#945401</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
</package>
<package pkgid="084b69eb66702105dbd00bebb973b65c6ad9545e651fc94a3fe26117d4f057ee" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.14" rel="lp151.10.7.1"/>
  <changelog author="rguenther@suse.com" date="1454068800">- Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
  [bnc#964182]</changelog>
  <changelog author="jmatejek@suse.com" date="1467288000">- update to 2.7.12
  * dozens of bugfixes, see NEWS for details
  * fixes multiple security issues:
    CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
    CVE-2016-5636 zipimporter heap overflow (bsc#985177)
    CVE-2016-5699 httplib header injection (bsc#985348)
    (this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
  to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
  process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py</changelog>
  <changelog author="jmatejek@suse.com" date="1480680000">- provide python2-* symbols, for support of new packages built as
  python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
  macros.python2</changelog>
  <changelog author="jmatejek@suse.com" date="1483444800">- update to 2.7.13
  * dozens of bugfixes, see NEWS for details
  * updated cipher lists for openssl wrapper, support openssl &gt;= 1.1.0
  * properly fix HTTPoxy (CVE-2016-1000110)
  * profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
  with python-2.7.13-overflow_check.patch, incorporating upstream changes
- add "-fwrapv" to optflags explicitly because upstream code still
  relies on it in many places</changelog>
  <changelog author="bwiedemann@suse.com" date="1487937600">- Add reproducible.patch to allow reproducible builds of various
  python packages like python-amqp
  Upstream: https://github.com/python/cpython/pull/296</changelog>
  <changelog author="jmatejek@suse.com" date="1494849600">- obsolete/provide python-argparse and provide python2-argparse,
  because the argparse module is available from python 2.7 up</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Call python2 instead of python in macros</changelog>
  <changelog author="jmatejek@suse.com" date="1511179200">- update to 2.7.14
  * dozens of bugfixes, see NEWS for details
  * fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
  * fixed segfaults with dict mutated during search
  * fixed possible free-after-use problems with buffer objects with custom indexing
  * fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1513944000">- exclude test_regrtest for s390, where it does not segfault as it should
  (fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
  (this is actually fixed by the 2.7.14 update; mentioning this for purposes
  of bugfix tracking)</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Add patch python-fix-shebang.patch to fix bsc#1078326</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add python-skip_random_failing_tests.patch bypass boo#1078485
  and exclude many tests for PowerPC</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517832000">- exclude test_socket &amp; test_subprocess for PowerPC boo#1078485
  (same ref as previous change)</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537963200">- Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
  converts shutil._call_external_zip to use subprocess rather than
  distutils.spawn. [bsc#1109663, CVE-2018-1000802]</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1553860800">- bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised.
  Upstream commits e37ef41 and 507bd8c.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554724800">- bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
  removing unnecessary (and potentially harmful) URL scheme
  local-file://.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160) and getting Lib/urlparse.py and tests in sync
  with the latest upstream state.
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1564056000">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
</package>
<package pkgid="f18fa07eef3faf9a8d9441228049aacbe5e30498f7f7371bef5b61ea6fea9817" name="libpython3_6m1_0" arch="i586">
  <version epoch="0" ver="3.6.9" rel="lp151.6.4.1"/>
  <changelog author="jmatejek@suse.com" date="1516795200">- move XML modules and python3-xml provide to python3-base
  (fixes bsc#1077230)
- move ensurepip to base</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix glibc 2.27 fail bsc#1079761:
  * fix-localeconv-encoding-for-LC_NUMERIC.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python3-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64</changelog>
  <changelog author="adam@mizerski.pl" date="1520424000">- Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
  subpackage.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1522497600">- update to 3.6.5
  * bugfix release
  * see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1523880000">- Move the tests from base to generic package wrt bsc#1088573
  * We still fail the whole distro if python3 is not build
  * The other archs than x86_64 took couple of hours to unblock
    build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
  least it is not run twice</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- As we run in main python package do not generate the pre_checkin
  from both now</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1535976000">- Add -fwrapv to OPTS, which is default for python3 anyway
  See for example https://github.com/zopefoundation/persistent/issues/86
  for bugs which are caused by avoiding it. (bsc#1107030)</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1548072000">- bsc#1120644 add CVE-2018-20406-pickle_LONG_BINPUT.patch fixing bpo#34656
  Modules/_pickle.c in Python before 3.7.1 has an integer overflow via
  a large LONG_BINPUT value that is mishandled during a "resize to twice
  the size" attempt. This issue might cause memory exhaustion, but is
  only relevant if the pickle format is used for serializing tens or
  hundreds of gigabytes of data.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554811200">- bsc#1129346: add CVE-2019-9636-urlsplit-NFKC-norm.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised. (CVE-2019-9636)
  Upstream gh#python/cpython#12224</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1556625600">- Update to 3.6.8:
  - bugfixes only
  - removed patches (subsumed in the upstream tarball):
  - CVE-2018-20406-pickle_LONG_BINPUT.patch
  - refreshed patches:
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - Python-3.0b1-record-rpm.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
  - python-3.3.0b1-test-posix_fadvise.patch
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch
  - python-3.6.0-multilib-new.patch
  - python3-sorted_tar.patch
  - subprocess-raise-timeout.patch
  - switch off LTO and PGO optimization (bsc#1133452)
- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1560254400">- bsc#1094814: Add bpo23395-PyErr_SetInterrupt-signal.patch to
  handle situation when the SIGINT signal is ignored or not handled</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160)
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1563537600">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568030400">- jsc#PM-1350 bsc#1149121 Update python3 to the last version of
  the 3.6 line. This is just a bugfix release with no changes in
  functionality.
- The following patches were included in the upstream release as
  so they can be removed in the package:
  - CVE-2018-20852-cookie-domain-check.patch
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-10160-netloc-port-regression.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - CVE-2019-9947-no-ctrl-char-http.patch
- Patch bpo23395-PyErr_SetInterrupt-signal.patch has been
  reapplied on the upstream base without changing any
  functionality.
- Add patch aarch64-prolong-timeout.patch to fix failing
  test_utime_current_old test.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568894400">- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
  bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
  bsc#1149792
- Add bpo36263-Fix_hashlib_scrypt.patch which works around
  bsc#1151490</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571745600">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="ed675a9ef80240ea38fefaf7bb027e57d710096c6bfcc9277111f7152a5bef47" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="lp151.6.4.1"/>
  <changelog author="jmatejek@suse.com" date="1516795200">- move XML modules and python3-xml provide to python3-base
  (fixes bsc#1077230)
- move ensurepip to base</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix glibc 2.27 fail bsc#1079761:
  * fix-localeconv-encoding-for-LC_NUMERIC.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python3-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64</changelog>
  <changelog author="adam@mizerski.pl" date="1520424000">- Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
  subpackage.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1522497600">- update to 3.6.5
  * bugfix release
  * see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1523880000">- Move the tests from base to generic package wrt bsc#1088573
  * We still fail the whole distro if python3 is not build
  * The other archs than x86_64 took couple of hours to unblock
    build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
  least it is not run twice</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- As we run in main python package do not generate the pre_checkin
  from both now</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1535976000">- Add -fwrapv to OPTS, which is default for python3 anyway
  See for example https://github.com/zopefoundation/persistent/issues/86
  for bugs which are caused by avoiding it. (bsc#1107030)</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1548072000">- bsc#1120644 add CVE-2018-20406-pickle_LONG_BINPUT.patch fixing bpo#34656
  Modules/_pickle.c in Python before 3.7.1 has an integer overflow via
  a large LONG_BINPUT value that is mishandled during a "resize to twice
  the size" attempt. This issue might cause memory exhaustion, but is
  only relevant if the pickle format is used for serializing tens or
  hundreds of gigabytes of data.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554811200">- bsc#1129346: add CVE-2019-9636-urlsplit-NFKC-norm.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised. (CVE-2019-9636)
  Upstream gh#python/cpython#12224</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1556625600">- Update to 3.6.8:
  - bugfixes only
  - removed patches (subsumed in the upstream tarball):
  - CVE-2018-20406-pickle_LONG_BINPUT.patch
  - refreshed patches:
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - Python-3.0b1-record-rpm.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
  - python-3.3.0b1-test-posix_fadvise.patch
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch
  - python-3.6.0-multilib-new.patch
  - python3-sorted_tar.patch
  - subprocess-raise-timeout.patch
  - switch off LTO and PGO optimization (bsc#1133452)
- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1560254400">- bsc#1094814: Add bpo23395-PyErr_SetInterrupt-signal.patch to
  handle situation when the SIGINT signal is ignored or not handled</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160)
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1563537600">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568030400">- jsc#PM-1350 bsc#1149121 Update python3 to the last version of
  the 3.6 line. This is just a bugfix release with no changes in
  functionality.
- The following patches were included in the upstream release as
  so they can be removed in the package:
  - CVE-2018-20852-cookie-domain-check.patch
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-10160-netloc-port-regression.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - CVE-2019-9947-no-ctrl-char-http.patch
- Patch bpo23395-PyErr_SetInterrupt-signal.patch has been
  reapplied on the upstream base without changing any
  functionality.
- Add patch aarch64-prolong-timeout.patch to fix failing
  test_utime_current_old test.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568894400">- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
  bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
  bsc#1149792
- Add bpo36263-Fix_hashlib_scrypt.patch which works around
  bsc#1151490</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571745600">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="67c85f3a71d5eda398d2518acdfa04ab9c593ad1eba47841fd45ff4bb4505f9d" name="libpython3_6m1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="lp151.6.4.1"/>
  <changelog author="jmatejek@suse.com" date="1516795200">- move XML modules and python3-xml provide to python3-base
  (fixes bsc#1077230)
- move ensurepip to base</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix glibc 2.27 fail bsc#1079761:
  * fix-localeconv-encoding-for-LC_NUMERIC.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1519128000">- Add python3-sorted_tar.patch (boo#1081750)</changelog>
  <changelog author="schwab@suse.de" date="1519128001">- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64</changelog>
  <changelog author="adam@mizerski.pl" date="1520424000">- Created %so_major and %so_minor macros
- Put Tools/gdb/libpython.py script into proper place and ship it with devel
  subpackage.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1522497600">- update to 3.6.5
  * bugfix release
  * see Misc/NEWS for details
- drop ctypes-pass-by-value.patch
- drop fix-localeconv-encoding-for-LC_NUMERIC.patch
- refresh python-3.6.0-multilib-new.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1523880000">- Move the tests from base to generic package wrt bsc#1088573
  * We still fail the whole distro if python3 is not build
  * The other archs than x86_64 took couple of hours to unblock
    build of other software, this way we work around the issue
- Some tests are still run in -base for the LTO tweaking, but at
  least it is not run twice</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- As we run in main python package do not generate the pre_checkin
  from both now</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1535976000">- Add -fwrapv to OPTS, which is default for python3 anyway
  See for example https://github.com/zopefoundation/persistent/issues/86
  for bugs which are caused by avoiding it. (bsc#1107030)</changelog>
  <changelog author="mcepl@suse.com" date="1547899200">- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1548072000">- bsc#1120644 add CVE-2018-20406-pickle_LONG_BINPUT.patch fixing bpo#34656
  Modules/_pickle.c in Python before 3.7.1 has an integer overflow via
  a large LONG_BINPUT value that is mishandled during a "resize to twice
  the size" attempt. This issue might cause memory exhaustion, but is
  only relevant if the pickle format is used for serializing tens or
  hundreds of gigabytes of data.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1554811200">- bsc#1129346: add CVE-2019-9636-urlsplit-NFKC-norm.patch
  Characters in the netloc attribute that decompose under NFKC
  normalization (as used by the IDNA encoding) into any of ``/``,
  ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
  URL is decomposed before parsing, or is not a Unicode string,
  no error will be raised. (CVE-2019-9636)
  Upstream gh#python/cpython#12224</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1556625600">- Update to 3.6.8:
  - bugfixes only
  - removed patches (subsumed in the upstream tarball):
  - CVE-2018-20406-pickle_LONG_BINPUT.patch
  - refreshed patches:
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - Python-3.0b1-record-rpm.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
  - python-3.3.0b1-test-posix_fadvise.patch
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch
  - python-3.6.0-multilib-new.patch
  - python3-sorted_tar.patch
  - subprocess-raise-timeout.patch
  - switch off LTO and PGO optimization (bsc#1133452)
- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
  Address the issue by disallowing URL paths with embedded
  whitespace or control characters through into the underlying
  http client request. Such potentially malicious header
  injection URLs now cause a ValueError to be raised.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1560254400">- bsc#1094814: Add bpo23395-PyErr_SetInterrupt-signal.patch to
  handle situation when the SIGINT signal is ignored or not handled</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1562155200">- bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
  which fixes regression introduced by the previous patch.
  (CVE-2019-10160)
  Upstream gh#python/cpython#13812</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1563537600">- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568030400">- jsc#PM-1350 bsc#1149121 Update python3 to the last version of
  the 3.6 line. This is just a bugfix release with no changes in
  functionality.
- The following patches were included in the upstream release as
  so they can be removed in the package:
  - CVE-2018-20852-cookie-domain-check.patch
  - CVE-2019-5010-null-defer-x509-cert-DOS.patch
  - CVE-2019-10160-netloc-port-regression.patch
  - CVE-2019-9636-urlsplit-NFKC-norm.patch
  - CVE-2019-9947-no-ctrl-char-http.patch
- Patch bpo23395-PyErr_SetInterrupt-signal.patch has been
  reapplied on the upstream base without changing any
  functionality.
- Add patch aarch64-prolong-timeout.patch to fix failing
  test_utime_current_old test.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568635200">- Add CVE-2019-16056-email-parse-addr.patch fixing the email
  module wrongly parses email addresses [bsc#1149955,
  CVE-2019-16056]</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1568894400">- Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
  bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
  bsc#1149792
- Add bpo36263-Fix_hashlib_scrypt.patch which works around
  bsc#1151490</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1571745600">- Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
  bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
  python/Lib/DocXMLRPCServer.py</changelog>
</package>
<package pkgid="fe61dea2e1ec81592a803940af5761e46cc4dbfec18ecba1097b07d2405abc93" name="libqb" arch="src">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="30a24b62be596d56afbd1c127eee791e547cd0a822d76ae5d447d8ad6367e74d" name="libqb-devel" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="499f2374055205a71b9249c334c97942616ec44aa68e67dc9b5d2eac20c2dda3" name="libqb-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="94602698f1ecfcd0c74bf2fd4a8a15a973fccda4477ac280978af386f33702dc" name="libqb-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="c8e0589e45418573b8fbdcace1ff885e29deec286e3fde06b893366ce3e5e79a" name="libqb-tests" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="32d9b5a1a55912055c0db1ca06b6f4fba163197b73e844e692797c6d09837f0a" name="libqb-tests" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="c023c9abc08f580fa5745f1215435e08f8082252297145e47184b34b8802d726" name="libqb-tools" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="73c908f34aa4af6674a7b43c7a016fcae0f16bcccc8765961d8e4bef4e46169a" name="libqb-tools" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="fafae34e72a2f809af26ce781fe8984a2ae9df36a2fa593a594944f2a902b79f" name="libqb20" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="552592266e156b64aa029501e48dc3847aa6d56f259f22d03b3f3da5088e5328" name="libqb20" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="3e468c3583f53e19350f4855da8ece9eec05dff9a3e375716528c5c3200374b2" name="libqb20-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="4b5be0137b4ce8a16fa2f4c884024fb4ac3c3870e1471385cbcd3055f45118be" name="librdmacm-utils" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="56a6186396075c9c5f7a7899e5ca328fc917ca466bee9e162fbec1d40dc3771a" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="6417ddeb497a617213a8d563ef490cf8ac2ece944bb07f299b9988923f8fdffc" name="librdmacm1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="cb77b6399efee404ea5ed1db5e19eb650870f97a2361af5fa47ba6dabdac10e1" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8a1ee02ec05564e6be70caa670a541e0918e3d205d29ae342f80a32166235bd7" name="librdmacm1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="11a96995e45acb5d187bdba24d8b28b4c0f525b6807188c21fea035b74e556f2" name="libre2-0" arch="i586">
  <version epoch="0" ver="20190901" rel="lp151.10.3.1"/>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- update to 2018-10-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1546603200">- update to 2019-01-01:
  * developer visible changes, performance tweaks and bug fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 2019-03-01:
  * developer visible changes only</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1563364800">- Update to 2019-07-01:
  * developer visible changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563796800">- Fix download url</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564747200">- Update to 2019-08-01:
  * Update Unicode data to 12.1.0
  * Various developer visible changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568289600">- update to 2019-09-01:
  * build system fixes</changelog>
</package>
<package pkgid="2edb13ec8fc56443253a74201c5ce8bd7498c49c3572f80ab172b55a766585d7" name="libre2-0" arch="x86_64">
  <version epoch="0" ver="20190901" rel="lp151.10.3.1"/>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- update to 2018-10-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1546603200">- update to 2019-01-01:
  * developer visible changes, performance tweaks and bug fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 2019-03-01:
  * developer visible changes only</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1563364800">- Update to 2019-07-01:
  * developer visible changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563796800">- Fix download url</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564747200">- Update to 2019-08-01:
  * Update Unicode data to 12.1.0
  * Various developer visible changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568289600">- update to 2019-09-01:
  * build system fixes</changelog>
</package>
<package pkgid="393e5b7adff1de78287b8278a39eeec1f8306967152822506d09c2e665a1aa9d" name="libre2-0-32bit" arch="x86_64">
  <version epoch="0" ver="20190901" rel="lp151.10.3.1"/>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- update to 2018-10-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1546603200">- update to 2019-01-01:
  * developer visible changes, performance tweaks and bug fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 2019-03-01:
  * developer visible changes only</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1563364800">- Update to 2019-07-01:
  * developer visible changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563796800">- Fix download url</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564747200">- Update to 2019-08-01:
  * Update Unicode data to 12.1.0
  * Various developer visible changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568289600">- update to 2019-09-01:
  * build system fixes</changelog>
</package>
<package pkgid="358b87908545c9065c2e74b3e7425af94d2e5cc0334197d957e3d34512bec189" name="libreadline7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="3fbfc940c3b1900e6786f17efdba66f5574bbe9376c4b7b9bb085a4917769ceb" name="libreadline7" arch="i586">
  <version epoch="0" ver="7.0" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="1fd47c0f61c5c739f318d1a6cac54ef4b8f99b7c3633741532416e18701e59fa" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="lp151.10.3.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="7e950dc8d5b8996ce9671ba6cbe842f1f0195c013cfc6df934f1a154f9a394db" name="libreoffice" arch="src">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="49e764a22abdbc0ad2674e34fd00e304fa29200e02d06ceea4cdbcff20b5f974" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="57574c5e2c46195f4342284d5f9b1caa5a26ab38180d16be418bca1c502a6721" name="libreoffice" arch="src">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="2e299789576d76be54122bfbbc64bbacfdef44681d83ff99517dfa86e3083b56" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="edc76e3d5774e256370f917190dbc402864a885592f072188f11aacb46e0277c" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="3c23cd01e48c4fed7f2e1d75845a64185c4dc758cc95f8f2a557a2b11595ac32" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="51006948bd4800c18df7fdd38616620e3c644297f1e782bb6d6bb4b039a11595" name="libreoffice-base-drivers-firebird" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="746994aec863449da8be3975cefde911205d474f45121bc7c29080a1cb9e90be" name="libreoffice-base-drivers-firebird" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="fdd9d2d999a7bc61e3d0d9ac932054c5aebd29bb0ba3d05e33addc02dc1b314c" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a1fc9464ea3a20bfd753e9f6bf7392f4b6627a906ef7bb68cdaa0570a5fbbabd" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="af2efe500f971866de31a851c510ad1fd4638e834f1963a914c2f563c15818c2" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="25b8f4ef9766c35eece1b1265b3e4c510b5703ad9ce34ab4099d1d6752915a38" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="082f0f7813d5b6142d87d26128e9e74b3493e0906d76760d19c7b114c7595ab9" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="4e363eb2528248c173a8e46b3da8ed8e0023e87ae80b8a164042e8d780ace915" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="cbf764e7b3faf933a23b8d425160c87286874fbe4f07fbc0e6f47fe641a6c3ba" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="098f13b1792280a6c6ecbe1122760d3e55cfce3692e592be9a733fcadf4f542f" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="99b32e44a26980924ab6c982a493d98439a85c0ac8416e145de9514dc49120b4" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="1e8baea258bcdaabe7ab4e30ed66cae0b2ba205291a9f90afb227de961bd1677" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="2eebe674c3ac3367612d991eb193b4ca30454056aba39488572b47eea2768c55" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="e6cebe5620f237fd5cd9e3646a6cdc3d7f7b9022d0f6aad88c9748c3061da570" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="44b90293a0a4f36d3b0df85939be6ddad6ddb73fe9d0101d104a53b045c01910" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="afffb43d603fbec896f0239aa12abf3aa4b5288c383aafbac36d1ee666dafbe0" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="ff6d18101c9c4c5073dbae289f637e3554dc6329b0e213696f92092066b401ad" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="6c70e7630f347852a39cb48eebe4c3959cf95d2152602b7fb63e25faaced22a5" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="7a338926afc691b650786f89a5241e53c22b396090442d8c355a3e3d6f28824b" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a86c6efc1f41bccfeec102617f6848f7a4f13747ba6f75063e59dfdcd6e08950" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="43fcc8c06e2677e4f06edc5b2572b12cbaa41098cf045d174ab788f4a989671e" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="38d0dff33fc913feea1512623092042e8d735a31aefaea58cf60cd237c92169d" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="f70791860183d62bd64a6558347b82cf131252b0abab8c4657464eb6759aa73f" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="703de43419c20ff279585960ec73023974bbdd882b4bf720959b1ec3f7b7125c" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="528aa1fa4324bbe10dada254fe55b5a3b45c08f05a4686a3170496ac64d3f35e" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="362c2da3ed415758c8f6a5bc03156f1b73777031e6b4e844ee899f0829dc485d" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="b11cd8baf9115e6bdd28096b0800378a1f5ffff2450aa336efa450aff688d484" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="3a6d830a57136ca677fa3fdad1927d025bb66dc06d0184192e307ffc853ea5ee" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="454f2255e60d659abff4e07dfeea73375e3164cc23b124c433a07423465a5e8c" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a8940d4f4094f6516b79df934db38c63b98229aafb26cda130c0100f1d5e10cf" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="e01685be5c68fe4c5b07382b560c9d7376a4a3491bb1fb942adf57c90fa348c1" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="ac341da4e1ce7ba24de2f2c4332ff4585aadcb03b8f5cb727b400e3b219db7d9" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="a4fc4d3259871a8668858b232211b4834f22ae31a427958d477466f4395e6005" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="8d526812f2fae8888ff3414952e71cb2fcb50809361ab79b554d166f51562a3e" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="d5aac1e6d997c912153ec2d456724a67bdc13a05e13275df85cc64dab180416b" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="093d20dad907ecdf93d9326778e594c1eff4dcc61b37b137e7fbce54e8bf8fdc" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="dbde60b8e7c073b11dcc6f64b8e0eef912fce08ed4ffd6f72c6027ba34b27dc9" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="32479125fa653e5db548196009ba5f35a9fcc2b854d0bf5b8da5569c05b7c8fa" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="de51e7139ef3338777d4b29d7a164e04f83a4ffae77b8dda3baeb96d7b243052" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="0d9c47b7825ecbf9e1f3ca76e859003712e664e8ea8d850d51eebaedf096ac2d" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="2e36c97806437ba77f831519f00edf196624d609f451b1f9658742296b909f3b" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="6a7f27e0806159d787954412568e1a8f213ab96a32a537c10b537188cc8e07ec" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5c96ffb7e418a0b5e9d4292d5b77e9bb9ab344e5e13f5464201fb29022a2bb24" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="e3a8d6bcdfb10382a7324ee8041e8693af160a353e74e5b118cb8a6f9a33ed63" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5e40616beae5e1e72d5c523ac964a27e0aa7ed5da1ad2579346bafd1adb5c290" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="098b1c042acd739e959e608035eb199a3df9cba1b8336618c4936506a8af6659" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="9671ae6b554694873b4a45ef6b38331816dd4cf5c62f005fb1f2d01e78867bc7" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="6bc9a78b40c907bc2683e5921bb784eda9313be9d1231a2f33a67c1b624eea9a" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="ac5135177f6a6086a80eae1192452779ed46f95fd184b5a7ff3cad4cc91940ad" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="129df7fa7131e23cc6a573f0a51b25e08f6702f31ff2c334b4b04f79dc733245" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="ec30d1812c8c4a099f2b669e64b3853c57eedf93cfbe71d90671b9576abdb7ae" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="fbf38902d2573082b7fccf81a300a5f6b2cfffe0e132210c47f05848c403c434" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="b7c5771a37c7a23805338a71e066ecc74ebb44da96fcdc15b510772cf4eb406f" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b7ba47a0658306b02536cff0a64a8094cef2748c1966c7f53a283526bdcd7497" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="df9ee17819ac404c8bd26f66ea80fddea70b43fe3ab1915249578d528d79f6a8" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="bf4ac6d158d4a8b1c0b6f814f1128382ae546cf812e5d92cf6c62f5002829b03" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="043b28fc2fee62a67a2b011c4151eeb8a90e87af0b148ff80ab4ec2f121306e7" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="f488a3d4af7a7ac74db0894d1d8e9e89cb08208e0d266e86e22750e9f18963bc" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="1ff996bc5966db35445257096af87b2b9cadcddd2509f3fe1e95c25ac558a266" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="fc93b0f24609ca7b4a230710ff99354fb778cc2b9f8b9e917643ed8097883545" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="fbf52830b6cff779c4774aa89172152f24369c8272f1d82e231a1ccd413581b1" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b6fe4a5c7dbe76fbaed90533dbf87665b53f5289ce281a224b364ca920f5e0c8" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="156b6c78234ddcc330f613e5b5bb7d731906d2941877ba8eb61c046419023444" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="8f81f8201b26373eff9358bfa3292a11e25228bd4892d5e6438b212c6091851d" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="ff4f8c9369bc987624e464b16a488a7578bd3392c9fe433d989caf9f81fe3587" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="5702177d579210781850fd1805752d946b977f12bb0102a6fb393161d0013d06" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="778978cfcfaf819e76c3ac4d4c0a5ca5fb5849ca7dc7e1a104e370ae9959ca0c" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a22e62cb0181bc88bf5a8329abb6a309a2a6ec4c47280dc9dd688905f402447f" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="0992ec40bb2c29bd66cf210f2ec61ec3e31fb8ff091fdd1677efc18af62b081b" name="libreoffice-l10n-dsb" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="bb50aadf340795094bc76a6d82b605169f7a0410e3e8842a16d51675f39060ca" name="libreoffice-l10n-dsb" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="707035386a9f1d09f85823f40095baac8e1743f28f5f672e03323f0f9e58a14d" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="f5a4636b7b5bf576df3bec241402566f090c2b7f072573a2c99b2130352fdcae" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="963bd50b2ce0efd650bc76ecf2a3c0c7183fb513c4f2821f01a46b9d53cb7ebf" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="d586d1fb86b3f6dd843ab840713c273aafea68def90f93e1d9613e7d9ea119d0" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="b352d6fb06f69059ac26dcb5493b55755b02f6ad403616cae8590bca2f39df66" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="c105e6dae58cc4204791ebcae6caae76f34af5be868d74427e1922dfe74ada13" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="6f0983fd50a243ecdd51ddf8e7e861582396307b5203dc816421319a3d56cbf2" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b06cd87d511759c491e73b14cb30c5867e7ec2961e219bb5d05302d800a2aeed" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5b1f4ad6b0226abaa8c0d5f3d69fc9cb52d0cf02f9fbbf6b844d18582097a69a" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="f4a8fde1a2d22c6ba64a2a7a35ff0840fc190ce0f44506ea965d333f434b71a5" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="59f871f9f4789bd2c74374975bcd9d6a893ca5d94a3e08bf54d053f35716586b" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="9064556d568966553001bbd770e1fc6698d66261807b9a9502e5f7d5e73d4f56" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="9c2405e5333ba3e39dbeb750a6e2a70a3582f54354430660271d50c6005fa065" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="40f233dad416926e608e69ab49da5ab3e8e78c81fb9aa36467002d0e4421b001" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="3e50fed7467af90a513456594ea489e5fb9acd17363edbb55489bc9de054fba8" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="510bc04dcca04af2fba4cd5138c9a264197021dbe9c07560c63a4e39228c0827" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="1fa7bc34b0ca483b24e4ae34fc4a10d81f3269fc34d431dc318cb0d0d43503c8" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="5f226ba0685efeca1c1e6da7ad77137bea9a52a3146e9aef52ca2c8c251760fd" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="806980dafe497e44f834d013963df09cb8893fc716b39284107688b1183066df" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b4ab2a31483a281217d4bfaea7ca2b5d724f74a15273d2a6cd180699da0ce157" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="af9a65a90dbfe223f3ef3b7d2515d762b1bb4caa6c227baef490ff9e29537278" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="87e2db6065b584517380cbb379ad0e0e824eee5991f5c40f7c715e81a1415bfd" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="a834b6a19d1dc66306a7531212f6897e629b8e9b7a11e005bfc4682b1b93b2be" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="4154c91d10051737665af63665efcb183800625689bc650eef7ee053dfae24a9" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="144b52dc9ef630a9c714f0ee749402bbca8372d1218ef9b1741989b94ccd37f7" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="6ce16ae65d7bc8a1c121e102186a6a7c7f7d37041616b2375d40ffa4893d76c5" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5aba22f5d5e4e3feb4b28a75fab9ceb309a9ea70beb9e7f650aa561c38ac5ec2" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="3ffa08582e7774dac80d0b881a19fcadf4f909c3e4dddd540343dbf88abeb69f" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="7cbcf4436a2f47b9fe37080414b3d352dc06f06a42f574ffea1734e3adfc90cf" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="51ccfb4834ac5f0bbd57f2e940c29e0475cfd6f10f9776efbf61357c42dbee55" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="198f785684696d38771e38536d4264c8d295066f92540fc81f1a8b7283e99a86" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="f6c147b03e10fced14280cdec72d455aa3127cc1fb584b2737fca2b77f431719" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="00121807970eebf8f54e85b1dcea4bef97beced09c9b53aa509ee092aed9c126" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="5b4f071dbd3de55ff3908480b2c965433a075b973ab8b76a08bb6bd0e53d703d" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="33cd11127864617758b5c9ac7c2535502361cdffae695dee72f9009e567d4ebb" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="c7b7c222485791f70465e644a3fa3fbfdc689bd1f4b29ef9706e803436cb28f1" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="a055eceaf46d6df67bcaa12765d722368bf1a1fa175a9d0a4f0920fa0765cf28" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="24af068104767ba71f31a6936e5509780b101107fa06b1e29fb6395233dba381" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="9fbdfc328c7ce0e10a58d36b5a96b410565fc86f9f5831271cf9df7d2e7f631b" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="44de6b8b4979d4ffcc9a55b422928cc118d2a4d9d4c6555bf076ff52df6fcb0a" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="47be3fa4513126571b8d14ca9c3e29bc5d5d69348888e2880d409e9afffa6b89" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="58aab815442f87ea23849074bb33ddf6e316c702fbb0b1172a23e8a2bf914ee3" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="3618fada584dffe6883a06d33d9595215dbde72627a80664edcaaf1200fc49b0" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="d21f399a127930ad4a474385c8294da592aded997f69d39a377d612b1999b7ac" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="1b70373cffd7f6741c326aeab32b29b9291d9659a35b2add5544bdb8b31f3008" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="38373525a292875d4c26d9259cd88bd438399e89aefb5c14b90b6fab65a45185" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="1a7a160bea2761a089c9d29e7ffd5cdb0dadbd91f9a716c5dfd9070066b12eca" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b19a3b078b8d70b98f16abf057e8c6c317728e07db24d6fef148d9cda5cfce6f" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="f087a05e6d9396f07934fcce3a91d0d1b446a42ed44e4b83e12883e300e18fd7" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="c387d2bddda3778d3ba1703d8abb78b0911181235e1de772641f25ff38ec9c0b" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="166ac3eccb2859ce5c93cc6fa5262f35065a9f79f8b910ce541c0975c8ab17bc" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="1c695257c6b5919c51236ac7c013d8a72d162923b0e3bfc353b7377ba2642f01" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="7a12d99619aa84842f3da84d546c4bb23338c2e8422c4d06000bbe201f40443d" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="0d576cb37298a8fd8bef77c68a94d7c5946e9ca1aaa99891b5ba016288efcf7b" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="adf51c62a3f66baa45099fddfb5714e319678e8a4c494a50921016c135118ad8" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="e63c30ad3127308c5196306190b878a95128b55fa1811762174411b940d85fb9" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5f4eda7b5c82c0b4d73be476cb3e26e046aab8259fe02947e7c63bc13780f7d0" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b927d774f4eb7b6d9069b7c916978b8402542f1cce01cf0e0cca8fab80a133ec" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="95c231cf1d55ff9dd6304e4ef7b19c077e3ceecc278eb9f8cd46024e760e2d20" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="33daf76c400f113c07e7eb5c2d9313d4554eb2de84843ce9047920f5c575389d" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="eb8a1d81d507a442b6b72ab15c2851af3b24dd5230b0707de570e7ec16b42794" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="8ae9039837803de33126f456088b3028433b76387a1108675d7e2ad33831157e" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="8db1d1700c4bfc7214d48f94d0fa845bcc0a51f1b6ab803debc8c793528b6dfa" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="ab71ffe26604b31e43d08745412efad1e591fea326fd64c9375f0381b975711b" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="11e16c796f56b187b75c9835b3b7d72a535af221921e6274d25de9d21a54bec1" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="eff81ca6f788ed26e5b85d50eecd109e9e73b482b2029b555387e4fd967452a3" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="18520f9ad0f78c5db169a4373e11ba3bc71679b0b894feb835966d3e4f76d38e" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="c7198eaee0609eed1f28c0f91e0c283c3e34f6bb05a1363ec19402913afd8372" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="256d38cfefd0f53cff1775e20630180cd8764c251e7cec7d0b4aefaf9c857d4b" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="081a0ba3971f03cf3b549eca6c0a7ec7fdb4940f1c85750f40c10bcb04c4a752" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="73e32909b4a57fa7133666f4e726015edced92b2fd2e421588e49ebb402b101a" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="d42ed80ad3d1083020f02ed08b2d45284d1e59ed162238cae3418d3ff572d7d1" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="10c02192ee2c2e89719b64100800196a2d0030e9d9e5b74aa955fab77efafc1d" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="47a76f8492fcab20cf72fbbdb5907fdfa1abbe1bbb131e308a3a94db67d67da3" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="3381af5cc00b4a875da133191ec73a996ac4a23427dbc8bfb6b7edd10592a7b6" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a362885b3ac93f557b284c8eb90e68e0fe0bd8c2ed73e22fa57a3355417cdb65" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="0aeb4ab984c21763cb736c2b9979498b46bc14b29fe8ec4c584219d39c52aa25" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="01f8992b7475cb261143cea398f428e2146d32611e07ace4f4ebeb8d52d82379" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="7d3dfb071474c43e639569b0f7c4368526daef8bbee05bd17a6c022295180d04" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="9d31f0e0bdf8aa12b267b7895b5a56b4626fec7b0cad97cf8b093974b5266836" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="4a21a48cd9ba5b27646d928d1fe4cf5a0df3e88f844186631465adec9545f04d" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="f91da0389c0550dc8edd79fcc62d5d8b62d396504a3d372102cfe7ecfc30137f" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5b11fb53de62851f21d3ac76a5e5adf55890a7fb67949f071fdbdbce16d7db6e" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="7e7646f77dc1e4248d6678d04e412021eb8d6d67e42f72360b0e78860d1789c9" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="1f69667621b4b43f454790d6579d7e29052239840fedbf9112c45843f208e58f" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b4b66fdc51f7ee02d1beb1363926e53210933020a38f4ab2f995e7070dc004ee" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="64f53d265dfd75bcc413cbb20115251e963e54308f1b865974d84005a36c162c" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="8b1c4f76a75db1d327c8fedc81751f5920c95ee999230a19335a307ab9801288" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="9f0c51eb47d53dc9d2f0760a44536901c5f4f5057ab14213df266a9aed50833c" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="eeef9cc99c3708128548f7ab98ba829d2fde9ad58b18ef64a88eede344eea0f5" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="9ff9421a71f646bf795c5adedd93933781004dd42624c896b927297400bdc7a7" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="897a417d54ca19b5fe751676f246dfc3546c4d81b0d4e6985b644e8fa4a5b455" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="04424b4e0296c3db7622128095b0799ac0b41a407052d65b070ed29ab23c1992" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="bab8b0e91f8f4aaef7c0c8ba09b8775c1160bfe642bf5cdb313d01f1af652045" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="82599595d04236001685b6fb3831d406e2c349c90ec98a434f61b6b5f23eab5d" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="b9880c711bba158ed43a77ba6abaea138a1cae916bd8be30505cf44b96a4d97f" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="aab9e42302b5b6f232c8b94090495c71efb3aee19970a469cb51a6a7fc6b584e" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="c3da670d15d485402975c62190241d9aacb7b902195dd24e333d99a0af1115a4" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="c6b5ecda7cab3704e3b40bd6726074db911f9fe88c14a9ff53549f7bdfd05fe4" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="0f08d26083086af36d55fde94de0ffa4a625047cf6a2c17359f48c18dc03ddd0" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="ac379a358bf6f673693fab5365349568217ebdea4056df052639d783be6a8198" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="e82402e06e5ac79d87c3bc1e46c4921a3e610ce62126e8bcfeab5a670e1675eb" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="e93f1c932216e8e377c1e99cd1f4d521eaaee99ec0557ec3a3ce512314e9ddda" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="217cf11c54d86a2584642098a66d8c156be8aa1f3bfbe342075e33d95fc09508" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="be344bec5e67ec8d304bc1ad2a19c1672c9f708bac426172f2dd28f4751cb723" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a26639c2804a136d142401e6acf9fdba385c4dc4a1e4898757a187d6e80bcd77" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="83c2d38c77c0deb0d173e76ec8f05607e5da1a7ce1ea40179d65f0e2ffb9be3d" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="fd768944b884f09dc5c061fe88a2704b0eb14cd466ce56070a4f6efe3356d05b" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="d33b738978d38674ce72eaa87d94b7a3b719a371033f21f197183bc1cbab588a" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="4fbe92f253aa922c6a44ca42256c505fb07c2cc662a16ff265e8e6d65d753746" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="f7d6efd7f14c4b41478b4a5a5cb044b1101233c6aeb409ad8a3961232f802967" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="1d5ed3ccfbff6585709a706ac106d7896d99922b595daa7029bfa9b847fb0bed" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="e7353dc09339ffbd784ce14af3484d4ecbaebdbb4ff2eae2d3867a1ad27ce51c" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="847329f01dac306052d47b1e58c05215942f3479031d2d393932f10afc526ff4" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="6b413ead4b9fdfc66be429176b0d4e23ac0fcde16e9db7549d5a3c183830a71a" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="4ec803aa698d358cc8589602649c5fd99874ee8c366b82773714263e9d4a9393" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="60a11807365dbae05c158b968e7511f8552019f823a752c7ff7e2e339127d6b8" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="1ccfc617c9eb8017649a3a381e4f85b872ed3d19c0993387885cb2afdb121e01" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="21acb707be41523e74e3e487e8ea71b4a68e54c287b5e12f3cd4b8868af622b3" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="7a38c2c19c62b5408bc4c9e5cb4c8d39ca7f75a4bf7f0709b248743bf2a02406" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="b743429b23c50c68c945fb2ed19a5fb458538918fc4e3e9c34132e07b1229ef8" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="008e3ac5c0d052985ace5cb394b10123fd75eca8f9c9cc45bd13a120a11664b4" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="787bdfcb107dad59d501315312ec08e6d4fe8be91c89964cf2d75dc72d6661b4" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="35119c121f10acd4663c095c19653ccb12b5bedbfc4555a7db8d99afbde7eb01" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="0a8e31e5cd0f4144ad81264e0d5b9d60dfe620b94243e9c4502f3e16e1f6be05" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="68023c6586496450844ba7f4563f00f8251883346cf61cf01e40917999650947" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="0ab0c894f7e75c3c2773fe1af35c15df59753a46ec5a02f8c70c1a5012aa4945" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="50f70db7bbaa5158b7a8e354e37eb970c393f6393ee265d8faed01c39a33e3ca" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="5e7977087b415f5bee0e75084e11740a13c15cb863f290b85adca283b1b29d72" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="431e4332aa1155f912bbb03bc347c477bb40b711472b1b5b4e8fc8097c530f48" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="96b10cd58f98e3ff207ae2043534d7646655659a546f4c61bae1d8d0abe60a4c" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="74dbb390a93afbe510ce9d51fac998073b10cb7d0f46bb58d764838f106b013d" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="f31031ba5970f7725195c44c8797ea632496463d64d7bd034055b1824e929343" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="a2fe0940ab1e0cc8955825156f67a2dcdcfe7c330e2c570de899dc3fefd6ed5c" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2 bsc#1141862 CVE-2019-9848 bsc#1141861 CVE-2019-9849:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1562414400">- Fix bsc#1133534 LO-L3: [PPTX] SmartArt: Basic rendering of Trapezoid List
  * bsc1133534.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565697600">- Update to 6.2.6.2 bsc#1146098 CVE-2019-9850
  bsc#1146105 CVE-2019-9851 bsc#1146107 CVE-2019-9852:
  * Various bugfixes of 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Add patch to fix build with SLE12 boost:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568030400">- Update to 6.2.7.1:
  bsc#1149944 VUL-0: CVE-2019-9854 Unsafe URL assembly flaw
  bsc#1149943 VUL-0: CVE-2019-9855 path equivalence handling flaw
- Drop merged patch:
  * 0001-Fix-buidling-with-older-boost.patch</changelog>
</package>
<package pkgid="8b090cf4be1b6a6eb969cdbf6e8beabb531b5ad0f102af323dab5b839d9e71ad" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="6.2.5.2" rel="lp151.3.3.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Switch to gcc7 on SLE12</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1551700801">- libreoffice-postgresql.patch: pg_config is meant for linking
  server extensions, clients should use pkg-config instead to build
  against libpq. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Add patch to fix bsc#1127857:
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552046400">- Require firebird as default driver for base if enabled</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552910400">- Update to 6.2.2.2:
  * Few more tweaks over previous RC1</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552996800">- old-boost.patch: update patch to fix build with Boost from SLE-12</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553256000">- Update the old-icu.patch based on the upstream feedback</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554379200">- Add patch to fix diff in generated helpfiles with rebuilds:
  * 0001-Use-sort-on-finds-to-improve-deterministic-build.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555329600">- Update to 6.2.3.2 fate#327121:
  * Bugfix release 6.2.3
- Remove merged patches:
  * old-boost.patch
  * libreoffice-postgresql.patch
  * 0001-Fix-LTO-segfault-in-libtest_sw_uwriter-test.patch
  * boost_169.patch
  * kde5.patch
  * old-icu.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557144000">- Fake the epoch to make zip files reproducible</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557921600">- Strip lto from %_lto_cflags as the project has --enable-lto option</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558008000">- LO-L3: Slide deck compression doesn't, hmm, compress too much
  * bsc1127760.patch
- LO-L3: Psychedelic graphics in LibreOffice (but not PowerPoint)
  * bsc1124869.patch
- LO-L3: Image from PPTX shown in a square, not a circle
  * bsc1121874.patch</changelog>
  <changelog author="Andras Timar &lt;andras.timar@collabora.com&gt;" date="1558440000">- LO-L3: PPTX: Rectangle turns from green to blue and loses transparency when transparency is set
  * bsc1135228.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558699200">- If there is no firebird engine we still need java to run hsqldb
  bsc#1135189</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 6.2.4.2:
  * Various feature fixes on the 6.2 branch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Update to 6.2.5.2:
  * Various bugfixes on the 6.2 branch
- Remove merged patches:
  * bsc1124869.patch
  * bsc1127760.patch
  * bsc1121874.patch
  * bsc1135228.patch</changelog>
</package>
<package pkgid="3ba5c3cdf8fbe79cc188efb7d52a4034292911c37a0d016fd5baa024a1eb9c5c" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="6.2.7.1" rel="lp151.3.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1552219200">- boost_169.patch: fix build with Boost 1.69</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552392000">- Update to 6.2.2.1 bsc#1128845:
  * bundle of 6.2 series fixes
- Remove merged patches:
  * 0001-Speed-up-languagepack-installation.patch
  * kde5-32bit-build-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552564800">- Add patch to fix build on Leap 42:
  * kde5.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552651200">- Add patch to fix build with old icu from Leap 42:
  * old-icu